Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

poprosím o kontrolu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

poprosím o kontrolu

#1 Příspěvek od celeston »

Zdravím. Mám takovej problém PC je o něco poamaljší. Ale spíš ted se mi stala takova věc. Picu text ( e-mail nebo neoc jineho) a kurzor na psaní prostě zmizí. Jako kdybych od textu odklikl pryč a musím znovu kliknout do textu a můžu psat dál.zaroven se i na chvilku odpoji net a připojí. Posílam LOG.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2015-04-06 11:07:50
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 5 GB (6%) free of 77 GB
Total RAM: 8169 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:07:51, on 6.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\vsnpstd3.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\tsnpstd3.exe
C:\Users\Ondra\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\sysWow64\SearchProtocolHost.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = D:\wifi prijimac\TWCU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8891 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {3DC27EAF-405C-4151-B8EB-0CB7DA3BC822}
"C:\Windows\vsnpstd3.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c5fc4805-41cc-406d-8225-a88da53ad663 1
\??\C:\Windows\system32\conhost.exe "-1611665650195023927080709049740277989417121464082105730875-1006721648-1122889999
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1584196530-13827197841390796960-593979013-8792579019454069711650067806-719717256
WLIDSvcM.exe 3044
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\tsnpstd3.exe"
C:\Users\Ondra\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Windows\sysWow64\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2905179859-1510996684-4235714583-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2905179859-1510996684-4235714583-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2905179859-1510996684-4235714583-10003_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2905179859-1510996684-4235714583-10003 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ondra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-08 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-15 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-08 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-15 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-08 9577680]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"snpstd3"=C:\Windows\vsnpstd3.exe [2006-09-18 843776]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-19 11613288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"tsnpstd3"=C:\Windows\tsnpstd3.exe [2007-06-15 368640]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-03-13 5227648]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - D:\wifi prijimac\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard64.dll C:\Windows\System32\guard64.dll C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux9"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-04-06 11:05:12 ----D---- C:\rsit
2015-04-06 11:05:12 ----D---- C:\Program Files\trend micro
2015-04-04 10:43:25 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 10:43:25 ----SD---- C:\Windows\system32\GWX
2015-03-25 23:13:15 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvhdap64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-03-25 21:46:45 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-03-25 21:46:44 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepdu.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aeinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\acmigration.dll
2015-03-22 11:54:46 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-11 07:43:28 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 07:43:28 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 07:43:21 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 07:43:21 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 07:43:20 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 07:43:20 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 07:43:18 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 07:43:18 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 07:43:16 ----A---- C:\Windows\system32\evr.dll
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 07:43:14 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 07:43:13 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 07:43:13 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 07:43:12 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 07:43:11 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 07:43:11 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 07:43:10 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\winload.exe
2015-03-11 07:43:09 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\mf.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\ci.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 07:43:07 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 07:43:06 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 07:43:05 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 07:43:04 ----A---- C:\Windows\system32\smss.exe
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 07:43:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 07:43:00 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 07:42:30 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 07:42:30 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 07:42:28 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 07:42:28 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 07:42:21 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 07:42:21 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 07:42:18 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 07:42:18 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 07:42:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 07:42:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 07:42:15 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 07:42:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 07:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 07:42:09 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 07:41:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 07:41:25 ----A---- C:\Windows\system32\WMPhoto.dll

======List of files/folders modified in the last 1 month======

2015-04-06 11:07:46 ----D---- C:\Windows\Prefetch
2015-04-06 11:05:12 ----D---- C:\Program Files
2015-04-06 11:03:04 ----D---- C:\Windows\temp
2015-04-06 11:02:52 ----D---- C:\Windows\inf
2015-04-06 11:02:27 ----D---- C:\Windows
2015-04-06 11:02:26 ----D---- C:\ProgramData\NVIDIA
2015-04-06 11:01:19 ----D---- C:\Windows\system32\config
2015-04-06 10:58:22 ----D---- C:\Program Files\SUPERAntiSpyware
2015-04-06 09:02:18 ----D---- C:\Windows\System32
2015-04-06 09:02:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-04 10:43:37 ----D---- C:\Windows\winsxs
2015-04-04 10:43:32 ----D---- C:\Windows\Logs
2015-04-04 10:43:25 ----D---- C:\Windows\SysWOW64
2015-04-04 10:43:20 ----SHD---- C:\System Volume Information
2015-04-03 17:48:43 ----D---- C:\ProgramData\Origin
2015-04-03 14:11:26 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2015-04-03 11:07:36 ----D---- C:\Windows\system32\catroot2
2015-03-28 16:38:23 ----D---- C:\Windows\system32\NDF
2015-03-27 16:13:42 ----D---- C:\Program Files (x86)\Origin
2015-03-26 09:41:57 ----D---- C:\Windows\Minidump
2015-03-25 23:13:13 ----D---- C:\Windows\system32\DriverStore
2015-03-25 23:13:09 ----D---- C:\Windows\system32\drivers
2015-03-25 23:12:11 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-25 18:35:28 ----SD---- C:\Windows\system32\CompatTel
2015-03-25 18:35:28 ----D---- C:\Windows\system32\wbem
2015-03-25 18:35:28 ----D---- C:\Windows\system32\appraiser
2015-03-25 18:35:27 ----D---- C:\Windows\AppPatch
2015-03-22 13:14:02 ----RD---- C:\Program Files (x86)
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 16:25:23 ----D---- C:\Windows\debug
2015-03-11 10:10:16 ----SHD---- C:\Boot
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-11 10:06:34 ----D---- C:\Program Files\Windows Media Player
2015-03-11 10:06:34 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 10:06:33 ----D---- C:\Windows\system32\en-US
2015-03-11 10:06:33 ----D---- C:\Windows\system32\Dism
2015-03-11 10:06:33 ----D---- C:\Windows\system32\cs-CZ
2015-03-11 10:06:31 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-11 10:06:31 ----D---- C:\Windows\system32\Boot
2015-03-11 10:06:26 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 10:06:26 ----D---- C:\Program Files\Internet Explorer
2015-03-11 10:06:24 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 08:45:27 ----SHD---- C:\Windows\Installer
2015-03-11 08:45:26 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 08:40:57 ----D---- C:\Windows\system32\MRT
2015-03-11 08:38:14 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-08 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-08 267632]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-08-10 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-13 530488]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-08 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-08 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-08 436624]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-08 584056]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-08 38144]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-12 279616]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-08 94288]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-08 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-08 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-08 116728]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-12-08 122856]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2010-12-08 369640]
R3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2011-04-20 1930240]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-03-13 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2007-05-02 10503168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-28 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-09-08 310784]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2011-03-13 51872]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-03-13 280224]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-06-16 110336]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-11-01 82816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 206080]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-28 16200]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-01-08 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-09-02 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-08 50344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-08 2828408]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2010-08-12 133800]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-01-08 4012248]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#3 Příspěvek od celeston »

# AdwCleaner v4.200 - Log vytvooen 06/04/2015 v 11:38:54
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-03-29.1 [Server]
# Operaení system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Ondra - ONDRASEK
# Spuštino z : C:\Users\Ondra\Desktop\adwcleaner_4.200.exe
# Nastavení : Eištiní

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Prohlížeee ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v36.0.4 (x86 cs)

[eueouha6.default\prefs.js] - Oádek Smazáno : user_pref("extensions.wrc.SearchRules.terra.com.br.style", ".WRCN {display:none} #searchResultsDiv .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

-\\ Google Chrome v41.0.2272.118


*************************

AdwCleaner[R0].txt - [1130 bytu] - [06/04/2015 11:37:53]
AdwCleaner[S0].txt - [1063 bytu] - [06/04/2015 11:38:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1121 bytu] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#5 Příspěvek od celeston »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2015-04-06 12:25:54
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 5 GB (6%) free of 77 GB
Total RAM: 8169 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:25:54, on 6.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\vsnpstd3.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\tsnpstd3.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = D:\wifi prijimac\TWCU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8759 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Windows\vsnpstd3.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c5fc4805-41cc-406d-8225-a88da53ad663 1
\??\C:\Windows\system32\conhost.exe "-11165829521655497745665851669-1575156441-2079283013-1774445519-2047117276-1572610863
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-39701051868865342212043530329318189951903610676-18029913841888929267722500076
WLIDSvcM.exe 2984
"C:\Windows\tsnpstd3.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

taskeng.exe {83BB366E-05B1-4ECD-B998-571F7632FEC4}
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ondra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-08 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-15 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-08 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-15 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-08 9577680]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"snpstd3"=C:\Windows\vsnpstd3.exe [2006-09-18 843776]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-19 11613288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"tsnpstd3"=C:\Windows\tsnpstd3.exe [2007-06-15 368640]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-03-13 5227648]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - D:\wifi prijimac\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard64.dll C:\Windows\System32\guard64.dll C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux9"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-04-06 12:25:17 ----D---- C:\rsit
2015-04-06 11:37:49 ----D---- C:\AdwCleaner
2015-04-06 11:05:12 ----D---- C:\Program Files\trend micro
2015-04-04 10:43:25 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 10:43:25 ----SD---- C:\Windows\system32\GWX
2015-03-25 23:13:15 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvhdap64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-03-25 21:46:45 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-03-25 21:46:44 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepdu.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aeinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\acmigration.dll
2015-03-22 11:54:46 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-11 07:43:28 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 07:43:28 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 07:43:21 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 07:43:21 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 07:43:20 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 07:43:20 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 07:43:18 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 07:43:18 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 07:43:16 ----A---- C:\Windows\system32\evr.dll
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 07:43:14 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 07:43:13 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 07:43:13 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 07:43:12 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 07:43:11 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 07:43:11 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 07:43:10 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\winload.exe
2015-03-11 07:43:09 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\mf.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\ci.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 07:43:07 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 07:43:06 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 07:43:05 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 07:43:04 ----A---- C:\Windows\system32\smss.exe
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 07:43:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 07:43:00 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 07:42:30 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 07:42:30 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 07:42:28 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 07:42:28 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 07:42:21 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 07:42:21 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 07:42:18 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 07:42:18 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 07:42:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 07:42:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 07:42:15 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 07:42:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 07:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 07:42:09 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 07:41:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 07:41:25 ----A---- C:\Windows\system32\WMPhoto.dll

======List of files/folders modified in the last 1 month======

2015-04-06 11:47:20 ----D---- C:\Windows\System32
2015-04-06 11:47:20 ----D---- C:\Windows\inf
2015-04-06 11:47:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-06 11:41:47 ----D---- C:\Windows\Prefetch
2015-04-06 11:40:07 ----D---- C:\ProgramData\NVIDIA
2015-04-06 11:39:02 ----D---- C:\Windows\system32\config
2015-04-06 11:05:12 ----D---- C:\Program Files
2015-04-06 11:03:04 ----D---- C:\Windows\temp
2015-04-06 11:02:27 ----D---- C:\Windows
2015-04-06 10:58:22 ----D---- C:\Program Files\SUPERAntiSpyware
2015-04-04 10:43:37 ----D---- C:\Windows\winsxs
2015-04-04 10:43:32 ----D---- C:\Windows\Logs
2015-04-04 10:43:25 ----D---- C:\Windows\SysWOW64
2015-04-04 10:43:20 ----SHD---- C:\System Volume Information
2015-04-03 17:48:43 ----D---- C:\ProgramData\Origin
2015-04-03 14:11:26 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2015-04-03 11:07:36 ----D---- C:\Windows\system32\catroot2
2015-03-28 16:38:23 ----D---- C:\Windows\system32\NDF
2015-03-27 16:13:42 ----D---- C:\Program Files (x86)\Origin
2015-03-26 09:41:57 ----D---- C:\Windows\Minidump
2015-03-25 23:13:13 ----D---- C:\Windows\system32\DriverStore
2015-03-25 23:13:09 ----D---- C:\Windows\system32\drivers
2015-03-25 23:12:11 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-25 18:35:28 ----SD---- C:\Windows\system32\CompatTel
2015-03-25 18:35:28 ----D---- C:\Windows\system32\wbem
2015-03-25 18:35:28 ----D---- C:\Windows\system32\appraiser
2015-03-25 18:35:27 ----D---- C:\Windows\AppPatch
2015-03-22 13:14:02 ----RD---- C:\Program Files (x86)
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 16:25:23 ----D---- C:\Windows\debug
2015-03-11 10:10:16 ----SHD---- C:\Boot
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-11 10:06:34 ----D---- C:\Program Files\Windows Media Player
2015-03-11 10:06:34 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 10:06:33 ----D---- C:\Windows\system32\en-US
2015-03-11 10:06:33 ----D---- C:\Windows\system32\Dism
2015-03-11 10:06:33 ----D---- C:\Windows\system32\cs-CZ
2015-03-11 10:06:31 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-11 10:06:31 ----D---- C:\Windows\system32\Boot
2015-03-11 10:06:26 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 10:06:26 ----D---- C:\Program Files\Internet Explorer
2015-03-11 10:06:24 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 08:45:27 ----SHD---- C:\Windows\Installer
2015-03-11 08:45:26 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 08:40:57 ----D---- C:\Windows\system32\MRT
2015-03-11 08:38:14 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-08 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-08 267632]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-08-10 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-13 530488]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-08 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-08 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-08 436624]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-08 584056]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-08 38144]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-12 279616]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-08 94288]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-08 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-08 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-08 116728]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-12-08 122856]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2010-12-08 369640]
R3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2011-04-20 1930240]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-03-13 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2007-05-02 10503168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-28 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-09-08 310784]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2011-03-13 51872]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-03-13 280224]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-06-16 110336]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-11-01 82816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 206080]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-28 16200]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-01-08 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-09-02 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-08 50344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-08 2828408]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2010-08-12 133800]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-01-08 4012248]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#7 Příspěvek od celeston »

All processes killed
========== FILES ==========
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Ondra
->Temp folder emptied: 4401258 bytes
->Temporary Internet Files folder emptied: 1213305 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 369408620 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 643 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 300190 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 79906 bytes

Total Files Cleaned = 358,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Ondra
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 04062015_133512

Files moved on Reboot...
File move failed. C:\Users\Ondra\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\d0ee50f82000f8b25561e549f5f1b458_fce8395f8fd8a84b_6229ccd76215aea1_0_0.bin scheduled to be moved on reboot.
File move failed. C:\Users\Ondra\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\d0ee50f82000f8b25561e549f5f1b458_fce8395f8fd8a84b_6229ccd76215aea1_0_0.toc scheduled to be moved on reboot.
C:\Users\Ondra\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#8 Příspěvek od celeston »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2015-04-06 13:40:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 5 GB (7%) free of 77 GB
Total RAM: 8169 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:40:33, on 6.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Ondra\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
C:\Windows\vsnpstd3.exe
C:\Windows\tsnpstd3.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = D:\wifi prijimac\TWCU.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8847 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {0596DB50-E73D-43F0-AC8E-FDB28591B541}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c5fc4805-41cc-406d-8225-a88da53ad663 1
\??\C:\Windows\system32\conhost.exe "-1532956101-1253444981902187991651519126273864084185218517252549282077789861
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-702530257-1684526055-693346835351770231-1551104031-1777870170-1687074887383928520
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
WLIDSvcM.exe 2832
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Users\Ondra\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
"C:\Windows\vsnpstd3.exe"
"C:\Windows\tsnpstd3.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ondra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\eueouha6.default\extensions\
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-08 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-15 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-08 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-15 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-08 9577680]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"snpstd3"=C:\Windows\vsnpstd3.exe [2006-09-18 843776]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-19 11613288]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"tsnpstd3"=C:\Windows\tsnpstd3.exe [2007-06-15 368640]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-03-13 5227648]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - D:\wifi prijimac\TWCU.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard64.dll C:\Windows\System32\guard64.dll C:\Windows\system32\guard64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"midi3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux9"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-04-06 13:35:12 ----D---- C:\_OTM
2015-04-06 12:25:17 ----D---- C:\rsit
2015-04-06 11:37:49 ----D---- C:\AdwCleaner
2015-04-06 11:05:12 ----D---- C:\Program Files\trend micro
2015-04-04 10:43:25 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 10:43:25 ----SD---- C:\Windows\system32\GWX
2015-03-25 23:13:15 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvopencl.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglv64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvinitx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvIFR64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvhdap64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\NvFBC64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispgenco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvdispco6434788.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuvid.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcuda.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\nvcompiler.dll
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-03-25 23:11:13 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-03-25 21:46:45 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-03-25 21:46:44 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aepdu.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\aeinv.dll
2015-03-25 13:19:53 ----A---- C:\Windows\system32\acmigration.dll
2015-03-22 11:54:46 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-11 07:43:28 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 07:43:28 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 07:43:27 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 07:43:21 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 07:43:21 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 07:43:20 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 07:43:20 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 07:43:19 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 07:43:18 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 07:43:18 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 07:43:18 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 07:43:17 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 07:43:16 ----A---- C:\Windows\system32\evr.dll
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 07:43:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 07:43:14 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 07:43:14 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 07:43:13 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 07:43:13 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 07:43:12 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 07:43:12 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 07:43:11 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 07:43:11 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 07:43:10 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\winload.exe
2015-03-11 07:43:09 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 07:43:09 ----A---- C:\Windows\system32\mf.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 07:43:08 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\ci.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 07:43:08 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 07:43:07 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 07:43:07 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 07:43:07 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 07:43:06 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 07:43:06 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 07:43:05 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 07:43:05 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 07:43:04 ----A---- C:\Windows\system32\smss.exe
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 07:43:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 07:43:03 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 07:43:03 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 07:43:02 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 07:43:02 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 07:43:01 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 07:43:01 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 07:43:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 07:43:00 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 07:42:30 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 07:42:30 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 07:42:28 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 07:42:28 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 07:42:24 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 07:42:23 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 07:42:22 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 07:42:22 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 07:42:21 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 07:42:21 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 07:42:18 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 07:42:18 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 07:42:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 07:42:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 07:42:15 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 07:42:14 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 07:42:14 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 07:42:13 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 07:42:13 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 07:42:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 07:42:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 07:42:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 07:42:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 07:42:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 07:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 07:42:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 07:42:09 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 07:42:09 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 07:42:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 07:42:08 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 07:42:07 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 07:42:06 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 07:42:05 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 07:41:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 07:41:25 ----A---- C:\Windows\system32\WMPhoto.dll

======List of files/folders modified in the last 1 month======

2015-04-06 13:39:39 ----D---- C:\Windows\Prefetch
2015-04-06 13:38:32 ----D---- C:\Windows\temp
2015-04-06 13:38:05 ----D---- C:\ProgramData\NVIDIA
2015-04-06 13:36:56 ----D---- C:\Windows\system32\config
2015-04-06 13:35:12 ----D---- C:\Windows\Tasks
2015-04-06 11:47:20 ----D---- C:\Windows\System32
2015-04-06 11:47:20 ----D---- C:\Windows\inf
2015-04-06 11:47:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-06 11:05:12 ----D---- C:\Program Files
2015-04-06 11:02:27 ----D---- C:\Windows
2015-04-06 10:58:22 ----D---- C:\Program Files\SUPERAntiSpyware
2015-04-04 10:43:37 ----D---- C:\Windows\winsxs
2015-04-04 10:43:32 ----D---- C:\Windows\Logs
2015-04-04 10:43:25 ----D---- C:\Windows\SysWOW64
2015-04-04 10:43:20 ----SHD---- C:\System Volume Information
2015-04-03 17:48:43 ----D---- C:\ProgramData\Origin
2015-04-03 14:11:26 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2015-04-03 11:07:36 ----D---- C:\Windows\system32\catroot2
2015-03-28 16:38:23 ----D---- C:\Windows\system32\NDF
2015-03-27 16:13:42 ----D---- C:\Program Files (x86)\Origin
2015-03-26 09:41:57 ----D---- C:\Windows\Minidump
2015-03-25 23:13:13 ----D---- C:\Windows\system32\DriverStore
2015-03-25 23:13:09 ----D---- C:\Windows\system32\drivers
2015-03-25 23:12:11 ----D---- C:\Program Files\NVIDIA Corporation
2015-03-25 18:35:28 ----SD---- C:\Windows\system32\CompatTel
2015-03-25 18:35:28 ----D---- C:\Windows\system32\wbem
2015-03-25 18:35:28 ----D---- C:\Windows\system32\appraiser
2015-03-25 18:35:27 ----D---- C:\Windows\AppPatch
2015-03-22 13:14:02 ----RD---- C:\Program Files (x86)
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-03-13 21:41:47 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\OpenCL.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-03-13 21:41:47 ----A---- C:\Windows\system32\nvapi64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvshext.dll
2015-03-13 18:16:45 ----A---- C:\Windows\system32\nvmctray.dll
2015-03-11 16:25:23 ----D---- C:\Windows\debug
2015-03-11 10:10:16 ----SHD---- C:\Boot
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 10:06:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-11 10:06:34 ----D---- C:\Program Files\Windows Media Player
2015-03-11 10:06:34 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 10:06:33 ----D---- C:\Windows\system32\en-US
2015-03-11 10:06:33 ----D---- C:\Windows\system32\Dism
2015-03-11 10:06:33 ----D---- C:\Windows\system32\cs-CZ
2015-03-11 10:06:31 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-11 10:06:31 ----D---- C:\Windows\system32\Boot
2015-03-11 10:06:26 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 10:06:26 ----D---- C:\Program Files\Internet Explorer
2015-03-11 10:06:24 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 08:45:27 ----SHD---- C:\Windows\Installer
2015-03-11 08:45:26 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 08:40:57 ----D---- C:\Windows\system32\MRT
2015-03-11 08:38:14 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-08 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-08 267632]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-08-10 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-12-13 530488]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-08 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-08 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-08 436624]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-11-08 584056]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-11-08 38144]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-12 279616]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-11-08 94288]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-08 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-08 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-08 116728]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-12-08 122856]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2010-12-08 369640]
R3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2011-04-20 1930240]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-03-13 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19784]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2007-05-02 10503168]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-28 26440]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-09-08 310784]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2011-03-13 51872]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-06-07 231440]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-13 5020672]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-03-13 280224]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-06-16 110336]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-11-01 82816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 206080]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-28 16200]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-01-08 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-09-02 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-08 50344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-08 2828408]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148744]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2010-08-12 133800]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706312]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833544]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-03-13 935056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-03-13 410768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-01-08 4012248]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-27 1930608]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#9 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna? Stále ovšem máte málo volného místa na systémovém disku. Přesuňte něktrá svá data na jiné úložiště, příp. odinstalujte nepoužívané programy.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#10 Příspěvek od celeston »

Jo děkuji. Jo vím že disk C je hodně zaplnen nebo se nejak zaplnuje. Nevím co práve smazat.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#11 Příspěvek od Rudy »

Co bylo možné smazat, bylo smazáno. Přesuňte vaše soubory (dokumenty, fotky, videa, hudbu, apod) na jiné úložiště, nebo odinstalujte nepotřebné programy. Do vašeho PC zase tak podrobně nevidím, abych mohl říci, co konkrétně.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#12 Příspěvek od celeston »

Já všechny fotky vide atd mám na jiném disku. Ktery je zaplnen tak ze čtvrtiny,ale na to C zkoukám co by bylo možné odstratit tak nevidim v programu Files mi prijde že je vše potřebné nevím co tam zabíra tech 43 GB..
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#13 Příspěvek od Rudy »

celeston píše:Já všechny fotky vide atd mám na jiném disku. Ktery je zaplnen tak ze čtvrtiny,ale na to C zkoukám co by bylo možné odstratit tak nevidim v programu Files mi prijde že je vše potřebné nevím co tam zabíra tech 43 GB..
Tohle za vás nevyřeším, faktem je, že máte:
System drive C: has 5 GB (7%) free of 77 GB
což je málo. Chtělo by to tak dvojnásobek.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
celeston
Návštěvník
Návštěvník
Příspěvky: 275
Registrován: 26 pro 2007 13:34
Kontaktovat uživatele:
Kontaktovat uživatele celeston

Re: poprosím o kontrolu

#14 Příspěvek od celeston »

No evidentně je tu něco špatně ještě včera tam bylo volného na system.disku neoc málo přes Gb což je i jak vy píšete málo. Noa dnes už jen 1.6 GB něčím se to zaplnuje nevím čím...
Mužete mi poradit co s tím? Furt se postupně něčím zapňuje sám.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119677
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: poprosím o kontrolu

#15 Příspěvek od Rudy »

Může být způsobeno stránkovacím souborem, jehož velikost se mění se zatížením systému. To je ten důvod, proč byste měl mít min. 6-8GB volného místa na systémovém disku.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“