VIRY.CZ

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock:: 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

ComboFix 14-03-03.02 - D630 . 03. 2014 17:07:30.2.2 - x86
Microsoft Windows 8 Enterprise 6.2.9200.0.1250.420.1029.18.2046.1274 [GMT 1:00]
Spuštěný z: c:\users\D630\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\D630\Desktop\CFScript.txt
AV: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-03 do 2014-03-03 )))))))))))))))))))))))))))))))
.
.
2014-03-03 16:12 . 2014-03-03 16:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-03 16:06 . 2014-03-03 16:06 39464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\MpKsl8d3512b1.sys
2014-03-02 13:26 . 2014-02-06 07:08 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\mpengine.dll
2014-03-02 12:08 . 2014-03-02 12:08 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-02 12:08 . 2014-03-02 12:08 -------- d-----w- c:\programdata\Malwarebytes
2014-03-02 12:08 . 2014-03-02 12:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2014-03-02 12:08 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-02 12:03 . 2014-03-02 12:04 -------- d-----w- C:\AdwCleaner
2014-02-21 12:50 . 2014-02-27 19:18 -------- d-----w- c:\program files\trend micro
2014-02-21 11:21 . 2014-02-21 11:21 -------- d-----w- c:\programdata\NVIDIA
2014-02-21 11:19 . 2014-01-09 08:02 78296 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 11:19 . 2014-01-09 08:02 694240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-21 11:16 . 2014-02-21 11:21 -------- d-----r- c:\windows\BrowserChoice
2014-02-21 10:22 . 2014-02-21 10:24 -------- d-----w- c:\windows\system32\MRT
2014-02-21 10:18 . 2014-02-21 10:18 -------- d-----w- c:\program files\AuthenTec
2014-02-21 10:04 . 2014-02-21 10:04 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-21 09:42 . 2013-08-29 23:08 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-21 09:42 . 2013-08-29 23:08 4265760 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-21 09:42 . 2013-08-29 23:08 3006240 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-21 09:42 . 2013-08-29 23:08 662816 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-21 09:42 . 2013-08-29 23:08 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-21 09:42 . 2013-08-29 23:08 209184 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-21 09:42 . 2013-09-05 01:39 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-21 09:40 . 2014-02-21 09:42 -------- d-----w- c:\programdata\NVIDIA Corporation
2014-02-21 09:40 . 2014-02-21 09:42 -------- d-----w- c:\program files\NVIDIA Corporation
2014-02-21 09:38 . 2013-03-06 05:25 104680 ----a-w- c:\windows\system32\consent.exe
2014-02-21 09:38 . 2013-03-06 05:02 52224 ----a-w- c:\windows\system32\appinfo.dll
2014-02-21 09:38 . 2013-07-11 02:31 5573464 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-21 09:38 . 2012-10-06 04:15 2400256 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-02-21 09:37 . 2013-04-16 01:15 1229576 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-02-21 09:37 . 2013-06-22 04:47 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-02-21 09:37 . 2013-06-22 04:47 47832 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-02-21 09:37 . 2013-07-01 22:50 362328 ----a-w- c:\windows\system32\drivers\USBHUB3.SYS
2014-02-21 09:37 . 2013-07-01 22:50 268120 ----a-w- c:\windows\system32\drivers\USBXHCI.SYS
2014-02-21 09:37 . 2013-07-01 22:50 180568 ----a-w- c:\windows\system32\drivers\UCX01000.SYS
2014-02-21 09:37 . 2013-10-01 23:37 1569280 ----a-w- c:\windows\system32\crypt32.dll
2014-02-21 09:37 . 2013-10-02 23:41 1075712 ----a-w- c:\windows\system32\gdi32.dll
2014-02-21 09:35 . 2013-07-04 02:13 541696 ----a-w- c:\windows\system32\comctl32.dll
2014-02-21 09:35 . 2013-04-11 04:12 1086976 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2014-02-21 09:35 . 2013-04-11 04:12 1413632 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2014-02-21 09:35 . 2013-04-11 04:12 1303552 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-02-21 09:35 . 2013-04-11 04:12 1029632 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-02-21 09:35 . 2013-04-11 04:12 1063936 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2014-02-21 09:33 . 2013-01-09 23:26 1611776 ----a-w- c:\windows\system32\mmc.exe
2014-02-21 09:28 . 2013-07-01 22:08 211288 ----a-w- c:\windows\system32\drivers\WdFilter.sys
2014-02-21 09:27 . 2013-02-02 08:38 567808 ----a-w- c:\windows\system32\duser.dll
2014-02-21 09:26 . 2014-02-01 07:58 817664 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-02-21 09:26 . 2014-02-01 07:57 108032 ----a-w- c:\program files\Internet Explorer\jsdebuggeride.dll
2014-02-21 09:26 . 2013-10-19 04:04 59392 ----a-w- c:\windows\system32\imagehlp.dll
2014-02-21 09:26 . 2013-12-04 23:37 1419264 ----a-w- c:\windows\system32\msxml3.dll
2014-02-21 09:26 . 2013-05-26 23:17 35328 ----a-w- c:\windows\system32\atmlib.dll
2014-02-21 09:26 . 2013-05-25 02:32 300032 ----a-w- c:\windows\system32\atmfd.dll
2014-02-21 09:26 . 2012-11-08 04:24 75776 ----a-w- c:\windows\system32\fontsub.dll
2014-02-21 09:26 . 2012-11-08 04:24 10752 ----a-w- c:\windows\system32\dciman32.dll
2014-02-21 09:26 . 2012-11-08 04:01 3072 ----a-w- c:\windows\system32\lpk.dll
2014-02-21 09:22 . 2013-11-01 04:21 1799512 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-02-21 09:22 . 2013-06-30 22:48 64344 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-02-21 09:22 . 2013-06-30 22:48 380248 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-02-21 09:22 . 2013-06-30 22:48 334680 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-02-21 09:22 . 2013-06-30 22:48 18776 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-02-21 09:22 . 2013-06-29 02:31 24576 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-02-21 09:22 . 2013-06-29 02:30 84992 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-02-21 09:22 . 2012-11-20 04:59 22016 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-02-21 09:22 . 2012-11-07 18:36 131856 ----a-w- c:\program files\Windows Defender\SymSrv.dll
2014-02-21 09:22 . 2012-11-07 18:36 1213200 ----a-w- c:\program files\Windows Defender\DbgHelp.dll
2014-02-21 09:20 . 2013-10-10 09:32 115712 ----a-w- c:\windows\system32\cscript.exe
2014-02-21 09:20 . 2013-10-10 09:30 162304 ----a-w- c:\windows\system32\scrobj.dll
2014-02-21 09:20 . 2013-10-10 09:30 156160 ----a-w- c:\windows\system32\scrrun.dll
2014-02-21 09:20 . 2013-03-02 08:23 269312 ----a-w- c:\windows\system32\rdpshell.exe
2014-02-21 09:18 . 2013-05-15 02:24 793088 ----a-w- c:\windows\system32\autochk.exe
2014-02-21 09:18 . 2013-05-15 02:24 482816 ----a-w- c:\windows\system32\untfs.dll
2014-02-21 09:17 . 2013-07-19 22:13 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-21 09:17 . 2013-07-09 02:50 87040 ----a-w- c:\windows\system32\drivers\usbcir.sys
2014-02-21 09:17 . 2013-06-29 02:31 61440 ----a-w- c:\windows\system32\drivers\hidclass.sys
2014-02-21 09:17 . 2013-05-04 04:08 19456 ----a-w- c:\windows\system32\drivers\hidusb.sys
2014-02-21 09:17 . 2012-11-20 04:56 30208 ----a-w- c:\windows\system32\drivers\hidi2c.sys
2014-02-21 09:17 . 2013-07-01 22:15 36864 ----a-w- c:\windows\system32\drivers\usbscan.sys
2014-02-21 09:17 . 2013-07-01 22:15 18944 ----a-w- c:\windows\system32\drivers\usbprint.sys
2014-02-21 09:17 . 2013-06-29 02:32 26496 ----a-w- c:\windows\system32\drivers\hidparse.sys
2014-02-21 09:17 . 2013-11-06 23:18 3387904 ----a-w- c:\windows\system32\win32k.sys
2014-02-21 09:17 . 2012-11-01 04:41 1802240 ----a-w- c:\windows\system32\msxml6.dll
2014-02-21 09:17 . 2012-11-01 04:20 2048 ----a-w- c:\windows\system32\msxml6r.dll
2014-02-21 09:17 . 2012-11-10 04:23 132608 ----a-w- c:\windows\system32\poqexec.exe
2014-02-21 09:16 . 2013-03-15 00:16 640000 ----a-w- c:\windows\system32\drivers\http.sys
2014-02-21 09:15 . 2013-04-11 22:30 1421312 ----a-w- c:\windows\system32\DWrite.dll
2014-02-21 09:15 . 2013-04-27 03:21 503808 ----a-w- c:\windows\system32\win32spl.dll
2014-02-21 09:15 . 2013-02-12 00:18 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys
2014-02-20 20:55 . 2014-02-20 20:55 -------- d-----w- c:\program files\Secunia
2014-02-19 21:46 . 2007-05-30 15:50 27072 ----a-w- c:\windows\system32\drivers\PCASp50.sys
2014-02-19 21:45 . 2014-02-20 19:03 -------- d-----w- c:\program files\Common Files\Zeepe Framework 7
2014-02-19 21:45 . 2014-02-19 21:48 -------- d-----w- c:\programdata\Novatel Wireless
2014-02-19 21:45 . 2014-02-20 18:52 -------- d-----w- c:\program files\Dell
2014-02-18 16:15 . 2014-02-20 19:04 -------- d-----w- c:\program files\Microsoft Silverlight
2014-02-16 19:01 . 2014-02-20 19:03 -------- d-----w- c:\program files\Driver-Soft
2014-02-15 09:05 . 2014-03-02 19:05 -------- d-----w- c:\users\Ryba
2014-02-15 08:46 . 2009-09-22 18:44 9451 ----a-w- c:\windows\system32\hppfaxprintermonui5.dll
2014-02-15 08:46 . 2009-09-22 18:44 13929 ----a-w- c:\windows\system32\hppfaxprintermon5.dll
2014-02-15 08:46 . 2014-02-15 08:46 608 --sha-w- c:\windows\system32\winzvprt5.sys
2014-02-15 08:44 . 2014-02-20 18:59 -------- d-----w- c:\programdata\Hewlett-Packard
2014-02-15 08:44 . 2009-10-23 11:36 281600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpcpp093.DLL
2014-02-15 08:43 . 2009-10-23 11:36 161280 ----a-w- c:\windows\system32\hpcpn093.dll
2014-02-15 08:43 . 2009-02-25 16:32 59928 ----a-w- c:\windows\system32\fxcompchannel.dll
2014-02-15 08:43 . 2014-02-20 19:03 -------- d-----w- c:\program files\HP
2014-02-15 08:41 . 2014-02-20 18:54 -------- d-----w- c:\program files\Reference Assemblies
2014-02-15 08:40 . 2014-02-20 19:15 -------- d-----w- c:\windows\system32\XPSViewer
2014-02-15 08:39 . 2012-07-06 02:02 778856 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2014-02-15 08:39 . 2012-07-06 02:02 35400 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-02-15 08:36 . 2014-02-20 19:13 -------- d-----w- c:\programdata\HP
2014-02-15 08:36 . 2007-07-16 21:29 20504 ----a-w- c:\windows\system32\drivers\hpfxfax.sys
2014-02-15 08:36 . 2007-07-16 21:29 26136 ----a-w- c:\windows\system32\drivers\hpfxgen.sys
2014-02-15 08:36 . 2007-07-16 21:29 17432 ----a-w- c:\windows\system32\drivers\hpfxbulk.sys
2014-02-15 08:36 . 2009-10-20 22:10 733184 ----a-w- c:\windows\system32\hpptsp02.dll
2014-02-15 08:36 . 2009-10-10 02:03 749568 ----a-w- c:\windows\system32\hpxp2727.dll
2014-02-15 08:36 . 2008-01-15 08:00 327680 ----a-w- c:\windows\system32\hppcpr07.dll
2014-02-15 08:36 . 2007-02-08 03:58 188416 ----a-w- c:\windows\system32\hppcew07.dll
2014-02-15 08:36 . 2007-09-20 06:59 188416 ----a-w- c:\windows\system32\hppafx07.dll
2014-02-15 08:36 . 2007-02-08 04:03 450560 ----a-w- c:\windows\system32\hppasc07.dll
2014-02-15 08:36 . 2007-07-16 21:29 59928 ----a-w- c:\windows\system32\fxfaxchannel.dll
2014-02-15 08:35 . 2014-02-20 19:03 -------- d-----w- C:\M2727_Full_Solution_Win7_5_2_EMEA2
2014-02-15 08:34 . 2014-02-15 08:35 -------- d-----w- c:\program files\uTorrent
2014-02-15 07:04 . 2014-02-15 07:04 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-02-14 22:53 . 2014-02-27 19:13 -------- d-----w- c:\program files\MSBuild
2014-02-14 22:51 . 2014-02-27 19:13 -------- d-----w- c:\programdata\Microsoft Help
2014-02-14 22:21 . 2014-02-14 22:21 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-02-14 22:12 . 2014-02-20 18:44 -------- d-----w- c:\program files\Google
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-15 08:14 . 2012-07-26 06:53 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE" [2013-12-13 831488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2012-12-18 3478752]
"ToolBoxFX"="c:\program files\HP\ToolBoxFX\bin\HPTLBXFX.exe" [2010-01-27 53248]
"HP LaserJet M2727 MFP Series Fax"="c:\program files\HP\hp LaserJet M2727\hppfaxprintersrv.exe" [2009-09-22 2453504]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"HPUsageTracking"="c:\program files\HP\HP UT\bin\hppusg.exe" [2007-08-31 36864]
"systray"="c:\program files\Dell\Dell Mobile Broadband\systray.exe" [2007-06-15 331851]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2013-09-05 2586912]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableCursorSuppression"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
R2 HP LaserJet Service;HP LaserJet Service;c:\program files\HP\HPLaserJetService\HPLaserJetService.exe [2009-11-12 136192]
R3 HPFXFAX;HPFXFAX;c:\windows\system32\drivers\hpfxfax.sys [2007-07-16 20504]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2014-03-02 40776]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2012-06-02 601704]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe [2012-07-26 23040]
S1 MpKsl8d3512b1;MpKsl8d3512b1;c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\MpKsl8d3512b1.sys [2014-03-03 39464]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
S3 NWDellModem;Dell Wireless Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\nwdelmdm.sys [2007-05-30 92288]
S3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver;c:\windows\system32\DRIVERS\nwdelser.sys [2007-05-30 92288]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2012-06-02 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2012-06-02 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2012-06-02 661504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-14 20:10]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-20 19:33]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-20 19:33]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3747566395-703286962-2302389456-1001Core.job
- c:\users\D630\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-14 13:52]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3747566395-703286962-2302389456-1001UA.job
- c:\users\D630\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-14 13:52]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
Trusted Zone: dell.com
TCP: DhcpNameServer = 213.211.45.3 212.96.160.7 192.168.1.1
.
.
Celkový čas: 2014-03-03 17:14:07
ComboFix-quarantined-files.txt 2014-03-03 16:14
ComboFix2.txt 2014-03-02 19:05
.
Před spuštěním: 43 950 825 472 bytes free
Po spuštění: 43 902 672 896 bytes free
.
- - End Of File - - 7C19D0CFF58F276359A84C791B8E93ED
A36C5E4F47E84449FF07ED3517B43A31

ComboFix 14-03-03.02 - D630 . 03. 2014 17:07:30.2.2 - x86
Microsoft Windows 8 Enterprise 6.2.9200.0.1250.420.1029.18.2046.1274 [GMT 1:00]
Spuštěný z: c:\users\D630\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\D630\Desktop\CFScript.txt
AV: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-02-03 do 2014-03-03 )))))))))))))))))))))))))))))))
.
.
2014-03-03 16:12 . 2014-03-03 16:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-03-03 16:06 . 2014-03-03 16:06 39464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\MpKsl8d3512b1.sys
2014-03-02 13:26 . 2014-02-06 07:08 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\mpengine.dll
2014-03-02 12:08 . 2014-03-02 12:08 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-03-02 12:08 . 2014-03-02 12:08 -------- d-----w- c:\programdata\Malwarebytes
2014-03-02 12:08 . 2014-03-02 12:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2014-03-02 12:08 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-02 12:03 . 2014-03-02 12:04 -------- d-----w- C:\AdwCleaner
2014-02-21 12:50 . 2014-02-27 19:18 -------- d-----w- c:\program files\trend micro
2014-02-21 11:21 . 2014-02-21 11:21 -------- d-----w- c:\programdata\NVIDIA
2014-02-21 11:19 . 2014-01-09 08:02 78296 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 11:19 . 2014-01-09 08:02 694240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-21 11:16 . 2014-02-21 11:21 -------- d-----r- c:\windows\BrowserChoice
2014-02-21 10:22 . 2014-02-21 10:24 -------- d-----w- c:\windows\system32\MRT
2014-02-21 10:18 . 2014-02-21 10:18 -------- d-----w- c:\program files\AuthenTec
2014-02-21 10:04 . 2014-02-21 10:04 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-21 09:42 . 2013-08-29 23:08 62752 ----a-w- c:\windows\system32\nvshext.dll
2014-02-21 09:42 . 2013-08-29 23:08 4265760 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-21 09:42 . 2013-08-29 23:08 3006240 ----a-w- c:\windows\system32\nvsvc.dll
2014-02-21 09:42 . 2013-08-29 23:08 662816 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-21 09:42 . 2013-08-29 23:08 2555168 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-21 09:42 . 2013-08-29 23:08 209184 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-21 09:42 . 2013-09-05 01:39 53024 ----a-w- c:\windows\system32\OpenCL.dll
2014-02-21 09:40 . 2014-02-21 09:42 -------- d-----w- c:\programdata\NVIDIA Corporation
2014-02-21 09:40 . 2014-02-21 09:42 -------- d-----w- c:\program files\NVIDIA Corporation
2014-02-21 09:38 . 2013-03-06 05:25 104680 ----a-w- c:\windows\system32\consent.exe
2014-02-21 09:38 . 2013-03-06 05:02 52224 ----a-w- c:\windows\system32\appinfo.dll
2014-02-21 09:38 . 2013-07-11 02:31 5573464 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-21 09:38 . 2012-10-06 04:15 2400256 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-02-21 09:37 . 2013-04-16 01:15 1229576 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-02-21 09:37 . 2013-06-22 04:47 527064 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-02-21 09:37 . 2013-06-22 04:47 47832 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-02-21 09:37 . 2013-07-01 22:50 362328 ----a-w- c:\windows\system32\drivers\USBHUB3.SYS
2014-02-21 09:37 . 2013-07-01 22:50 268120 ----a-w- c:\windows\system32\drivers\USBXHCI.SYS
2014-02-21 09:37 . 2013-07-01 22:50 180568 ----a-w- c:\windows\system32\drivers\UCX01000.SYS
2014-02-21 09:37 . 2013-10-01 23:37 1569280 ----a-w- c:\windows\system32\crypt32.dll
2014-02-21 09:37 . 2013-10-02 23:41 1075712 ----a-w- c:\windows\system32\gdi32.dll
2014-02-21 09:35 . 2013-07-04 02:13 541696 ----a-w- c:\windows\system32\comctl32.dll
2014-02-21 09:35 . 2013-04-11 04:12 1086976 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2014-02-21 09:35 . 2013-04-11 04:12 1413632 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2014-02-21 09:35 . 2013-04-11 04:12 1303552 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-02-21 09:35 . 2013-04-11 04:12 1029632 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2014-02-21 09:35 . 2013-04-11 04:12 1063936 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2014-02-21 09:33 . 2013-01-09 23:26 1611776 ----a-w- c:\windows\system32\mmc.exe
2014-02-21 09:28 . 2013-07-01 22:08 211288 ----a-w- c:\windows\system32\drivers\WdFilter.sys
2014-02-21 09:27 . 2013-02-02 08:38 567808 ----a-w- c:\windows\system32\duser.dll
2014-02-21 09:26 . 2014-02-01 07:58 817664 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-02-21 09:26 . 2014-02-01 07:57 108032 ----a-w- c:\program files\Internet Explorer\jsdebuggeride.dll
2014-02-21 09:26 . 2013-10-19 04:04 59392 ----a-w- c:\windows\system32\imagehlp.dll
2014-02-21 09:26 . 2013-12-04 23:37 1419264 ----a-w- c:\windows\system32\msxml3.dll
2014-02-21 09:26 . 2013-05-26 23:17 35328 ----a-w- c:\windows\system32\atmlib.dll
2014-02-21 09:26 . 2013-05-25 02:32 300032 ----a-w- c:\windows\system32\atmfd.dll
2014-02-21 09:26 . 2012-11-08 04:24 75776 ----a-w- c:\windows\system32\fontsub.dll
2014-02-21 09:26 . 2012-11-08 04:24 10752 ----a-w- c:\windows\system32\dciman32.dll
2014-02-21 09:26 . 2012-11-08 04:01 3072 ----a-w- c:\windows\system32\lpk.dll
2014-02-21 09:22 . 2013-11-01 04:21 1799512 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-02-21 09:22 . 2013-06-30 22:48 64344 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-02-21 09:22 . 2013-06-30 22:48 380248 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-02-21 09:22 . 2013-06-30 22:48 334680 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-02-21 09:22 . 2013-06-30 22:48 18776 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-02-21 09:22 . 2013-06-29 02:31 24576 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-02-21 09:22 . 2013-06-29 02:30 84992 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-02-21 09:22 . 2012-11-20 04:59 22016 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-02-21 09:22 . 2012-11-07 18:36 131856 ----a-w- c:\program files\Windows Defender\SymSrv.dll
2014-02-21 09:22 . 2012-11-07 18:36 1213200 ----a-w- c:\program files\Windows Defender\DbgHelp.dll
2014-02-21 09:20 . 2013-10-10 09:32 115712 ----a-w- c:\windows\system32\cscript.exe
2014-02-21 09:20 . 2013-10-10 09:30 162304 ----a-w- c:\windows\system32\scrobj.dll
2014-02-21 09:20 . 2013-10-10 09:30 156160 ----a-w- c:\windows\system32\scrrun.dll
2014-02-21 09:20 . 2013-03-02 08:23 269312 ----a-w- c:\windows\system32\rdpshell.exe
2014-02-21 09:18 . 2013-05-15 02:24 793088 ----a-w- c:\windows\system32\autochk.exe
2014-02-21 09:18 . 2013-05-15 02:24 482816 ----a-w- c:\windows\system32\untfs.dll
2014-02-21 09:17 . 2013-07-19 22:13 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-21 09:17 . 2013-07-09 02:50 87040 ----a-w- c:\windows\system32\drivers\usbcir.sys
2014-02-21 09:17 . 2013-06-29 02:31 61440 ----a-w- c:\windows\system32\drivers\hidclass.sys
2014-02-21 09:17 . 2013-05-04 04:08 19456 ----a-w- c:\windows\system32\drivers\hidusb.sys
2014-02-21 09:17 . 2012-11-20 04:56 30208 ----a-w- c:\windows\system32\drivers\hidi2c.sys
2014-02-21 09:17 . 2013-07-01 22:15 36864 ----a-w- c:\windows\system32\drivers\usbscan.sys
2014-02-21 09:17 . 2013-07-01 22:15 18944 ----a-w- c:\windows\system32\drivers\usbprint.sys
2014-02-21 09:17 . 2013-06-29 02:32 26496 ----a-w- c:\windows\system32\drivers\hidparse.sys
2014-02-21 09:17 . 2013-11-06 23:18 3387904 ----a-w- c:\windows\system32\win32k.sys
2014-02-21 09:17 . 2012-11-01 04:41 1802240 ----a-w- c:\windows\system32\msxml6.dll
2014-02-21 09:17 . 2012-11-01 04:20 2048 ----a-w- c:\windows\system32\msxml6r.dll
2014-02-21 09:17 . 2012-11-10 04:23 132608 ----a-w- c:\windows\system32\poqexec.exe
2014-02-21 09:16 . 2013-03-15 00:16 640000 ----a-w- c:\windows\system32\drivers\http.sys
2014-02-21 09:15 . 2013-04-11 22:30 1421312 ----a-w- c:\windows\system32\DWrite.dll
2014-02-21 09:15 . 2013-04-27 03:21 503808 ----a-w- c:\windows\system32\win32spl.dll
2014-02-21 09:15 . 2013-02-12 00:18 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys
2014-02-20 20:55 . 2014-02-20 20:55 -------- d-----w- c:\program files\Secunia
2014-02-19 21:46 . 2007-05-30 15:50 27072 ----a-w- c:\windows\system32\drivers\PCASp50.sys
2014-02-19 21:45 . 2014-02-20 19:03 -------- d-----w- c:\program files\Common Files\Zeepe Framework 7
2014-02-19 21:45 . 2014-02-19 21:48 -------- d-----w- c:\programdata\Novatel Wireless
2014-02-19 21:45 . 2014-02-20 18:52 -------- d-----w- c:\program files\Dell
2014-02-18 16:15 . 2014-02-20 19:04 -------- d-----w- c:\program files\Microsoft Silverlight
2014-02-16 19:01 . 2014-02-20 19:03 -------- d-----w- c:\program files\Driver-Soft
2014-02-15 09:05 . 2014-03-02 19:05 -------- d-----w- c:\users\Ryba
2014-02-15 08:46 . 2009-09-22 18:44 9451 ----a-w- c:\windows\system32\hppfaxprintermonui5.dll
2014-02-15 08:46 . 2009-09-22 18:44 13929 ----a-w- c:\windows\system32\hppfaxprintermon5.dll
2014-02-15 08:46 . 2014-02-15 08:46 608 --sha-w- c:\windows\system32\winzvprt5.sys
2014-02-15 08:44 . 2014-02-20 18:59 -------- d-----w- c:\programdata\Hewlett-Packard
2014-02-15 08:44 . 2009-10-23 11:36 281600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpcpp093.DLL
2014-02-15 08:43 . 2009-10-23 11:36 161280 ----a-w- c:\windows\system32\hpcpn093.dll
2014-02-15 08:43 . 2009-02-25 16:32 59928 ----a-w- c:\windows\system32\fxcompchannel.dll
2014-02-15 08:43 . 2014-02-20 19:03 -------- d-----w- c:\program files\HP
2014-02-15 08:41 . 2014-02-20 18:54 -------- d-----w- c:\program files\Reference Assemblies
2014-02-15 08:40 . 2014-02-20 19:15 -------- d-----w- c:\windows\system32\XPSViewer
2014-02-15 08:39 . 2012-07-06 02:02 778856 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2014-02-15 08:39 . 2012-07-06 02:02 35400 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-02-15 08:36 . 2014-02-20 19:13 -------- d-----w- c:\programdata\HP
2014-02-15 08:36 . 2007-07-16 21:29 20504 ----a-w- c:\windows\system32\drivers\hpfxfax.sys
2014-02-15 08:36 . 2007-07-16 21:29 26136 ----a-w- c:\windows\system32\drivers\hpfxgen.sys
2014-02-15 08:36 . 2007-07-16 21:29 17432 ----a-w- c:\windows\system32\drivers\hpfxbulk.sys
2014-02-15 08:36 . 2009-10-20 22:10 733184 ----a-w- c:\windows\system32\hpptsp02.dll
2014-02-15 08:36 . 2009-10-10 02:03 749568 ----a-w- c:\windows\system32\hpxp2727.dll
2014-02-15 08:36 . 2008-01-15 08:00 327680 ----a-w- c:\windows\system32\hppcpr07.dll
2014-02-15 08:36 . 2007-02-08 03:58 188416 ----a-w- c:\windows\system32\hppcew07.dll
2014-02-15 08:36 . 2007-09-20 06:59 188416 ----a-w- c:\windows\system32\hppafx07.dll
2014-02-15 08:36 . 2007-02-08 04:03 450560 ----a-w- c:\windows\system32\hppasc07.dll
2014-02-15 08:36 . 2007-07-16 21:29 59928 ----a-w- c:\windows\system32\fxfaxchannel.dll
2014-02-15 08:35 . 2014-02-20 19:03 -------- d-----w- C:\M2727_Full_Solution_Win7_5_2_EMEA2
2014-02-15 08:34 . 2014-02-15 08:35 -------- d-----w- c:\program files\uTorrent
2014-02-15 07:04 . 2014-02-15 07:04 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-02-14 22:53 . 2014-02-27 19:13 -------- d-----w- c:\program files\MSBuild
2014-02-14 22:51 . 2014-02-27 19:13 -------- d-----w- c:\programdata\Microsoft Help
2014-02-14 22:21 . 2014-02-14 22:21 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-02-14 22:12 . 2014-02-20 18:44 -------- d-----w- c:\program files\Google
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-15 08:14 . 2012-07-26 06:53 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-01-30 14:05 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE" [2013-12-13 831488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2012-12-18 3478752]
"ToolBoxFX"="c:\program files\HP\ToolBoxFX\bin\HPTLBXFX.exe" [2010-01-27 53248]
"HP LaserJet M2727 MFP Series Fax"="c:\program files\HP\hp LaserJet M2727\hppfaxprintersrv.exe" [2009-09-22 2453504]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"HPUsageTracking"="c:\program files\HP\HP UT\bin\hppusg.exe" [2007-08-31 36864]
"systray"="c:\program files\Dell\Dell Mobile Broadband\systray.exe" [2007-06-15 331851]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2013-09-05 2586912]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableCursorSuppression"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
R2 HP LaserJet Service;HP LaserJet Service;c:\program files\HP\HPLaserJetService\HPLaserJetService.exe [2009-11-12 136192]
R3 HPFXFAX;HPFXFAX;c:\windows\system32\drivers\hpfxfax.sys [2007-07-16 20504]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2014-03-02 40776]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2012-06-02 601704]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe [2012-07-26 23040]
S1 MpKsl8d3512b1;MpKsl8d3512b1;c:\programdata\Microsoft\Windows Defender\Definition Updates\{7667AC1D-0134-458D-9DC4-D6E132FC5742}\MpKsl8d3512b1.sys [2014-03-03 39464]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
S3 NWDellModem;Dell Wireless Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\nwdelmdm.sys [2007-05-30 92288]
S3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver;c:\windows\system32\DRIVERS\nwdelser.sys [2007-05-30 92288]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2012-06-02 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2012-06-02 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2012-06-02 661504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2014-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-14 20:10]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-20 19:33]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-20 19:33]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3747566395-703286962-2302389456-1001Core.job
- c:\users\D630\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-14 13:52]
.
2014-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3747566395-703286962-2302389456-1001UA.job
- c:\users\D630\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-14 13:52]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
Trusted Zone: dell.com
TCP: DhcpNameServer = 213.211.45.3 212.96.160.7 192.168.1.1
.
.
Celkový čas: 2014-03-03 17:14:07
ComboFix-quarantined-files.txt 2014-03-03 16:14
ComboFix2.txt 2014-03-02 19:05
.
Před spuštěním: 43 950 825 472 bytes free
Po spuštění: 43 902 672 896 bytes free
.
- - End Of File - - 7C19D0CFF58F276359A84C791B8E93ED
A36C5E4F47E84449FF07ED3517B43A31

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.

Pak dej vědět jaký je stav PC.

Díky moc za pomoc!
PC vypadá OK.
Jaký doporučuješ antivir a co dále pravidelně používat, aby se člověk ubránil?

Mohl bys mi projít ještě stolní PC? Můžu sem dát log z RSIT?

Díky

jhemza píše:Jaký doporučuješ antivir

Pokud antivir zdarma tak Avast.

jhemza píše:...... co dále pravidelně používat, aby se člověk ubránil?

To aby se člověk ubránil napadení, není ani tak o zabezpečení ale právě o tom člověku.

jhemza píše:Mohl bys mi projít ještě stolní PC? Můžu sem dát log z RSIT?

Ano dej mi sem log i z druhého PC.

Roli píše:
jhemza píše:Jaký doporučuješ antivir
Pokud antivir zdarma tak Avast.
Nemusí být nutně zdarma. Co Eset?
jhemza píše:...... co dále pravidelně používat, aby se člověk ubránil?
To aby se člověk ubránil napadení, není ani tak o zabezpečení ale právě o tom člověku.
OK, takže neklikat na všechno a nestahovat všechno ) Tak nějak?
jhemza píše:Mohl bys mi projít ještě stolní PC? Můžu sem dát log z RSIT?
Ano dej mi sem log i z druhého PC.

Ve stolním PC mi nějaký minerd.exe roztáčí procesor ke 100%

(

Logfile of random's system information tool 1.09 (written by random/random)
Run by Boss at 2014-03-05 21:48:55
Microsoft Windows 8 Enterprise
System drive C: has 172 GB (86%) free of 200 GB
Total RAM: 3070 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:49:02, on 5. 3. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Boss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [mnccfrpSrv] C:\Windows\inf\mnccfrp.vbe
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT\"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [mine] C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Boss\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Service 16] "C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXEC:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Boss\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8900 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
taskeng.exe {075F0C71-42D8-4126-AAA6-3765BC249875}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {10bcd5e6-ffa5-463a-9b5a5ab887904947}
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\slsvc.exe
C:\Windows\PersonalizeEnabler.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\HP\hp laserjet m2727\hppfaxprintersrv.exe" "HP LaserJet M2727 MFP Series Fax"
C:\Windows\sysWOW64\wbem\wmiprvse.exe -secured -Embedding
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Windows\SysWOW64\cmd.exe" /K CD C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64 & mine.bat
\??\C:\Windows\system32\conhost.exe 0x4
C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\minerd.exe --algo=scrypt --url=stratum+tcp://stratum01.hashco.ws:8888 --userpass=Flyn.1:FQQ0P3FWXL
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-430fdc1c-e60a-4e39-966a-32c0fd366432 -SystemEventPortName:HostProcess-244f9035-320c-4f34-9a3c-a9a6d9b621ec -IoCancelEventPortName:HostProcess-659e9950-adfe-499d-906f-31b1574ab366 -NonStateChangingEventPortName:HostProcess-033f0c04-9ee2-42dd-b707-f0f5fd18c553 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:39e8a5f3-b542-4acf-bd9d-c559bd070a76 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4972 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4972 CREDAT:595204 /prefetch:2
"C:\Users\Boss\Desktop\RSITx64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1346679843-698221237-303718712-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1346679843-698221237-303718712-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP LaserJet M2727 MFP Series Fax"=C:\Program Files (x86)\HP\hp LaserJet M2727\hppfaxprintersrv.exe [2009-09-22 3700736]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Boss\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-08 136176]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Zoner Photo Studio Service 16"=C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-01-30 21822128]
"NextLive"=C:\Windows\SysWOW64\rundll32.exe [2012-07-26 48640]
"OfficeSyncProcess"=C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE []
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"MSStp"=C:\Windows\system32\msstp.vbe []
"mnccfrpSrv"=C:\Windows\inf\mnccfrp.vbe [2014-01-19 1342]
"ToolBoxFX"=C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe [2010-01-27 53248]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
""= []
"HPUsageTracking"=C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [2007-08-31 36864]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [2012-09-23 3477640]
"mine"=C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs [2014-01-18 150]
"mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-05 21:48:55 ----D---- C:\rsit
2014-03-05 21:48:55 ----D---- C:\Program Files\trend micro
2014-03-05 14:51:24 ----A---- C:\Windows\system32\netcfg-87641859.txt
2014-03-05 14:51:21 ----A---- C:\Windows\system32\netcfg-87639546.txt
2014-03-02 21:58:57 ----A---- C:\Windows\system32\netcfg-31750.txt
2014-03-02 21:54:40 ----A---- C:\Windows\system32\netcfg-15038390.txt
2014-03-02 17:40:17 ----A---- C:\Windows\system32\netcfg-17828375.txt
2014-03-02 17:40:15 ----A---- C:\Windows\system32\netcfg-17826421.txt
2014-03-02 17:12:14 ----D---- C:\Users\Boss\AppData\Roaming\newnext.me
2014-03-02 17:09:49 ----D---- C:\Program Files (x86)\Mobogenie
2014-03-02 16:50:30 ----A---- C:\Windows\system32\netcfg-14842171.txt
2014-03-02 16:50:24 ----A---- C:\Windows\system32\netcfg-14835625.txt
2014-03-02 12:45:51 ----A---- C:\Windows\system32\netcfg-168343.txt
2014-03-01 15:07:56 ----A---- C:\Windows\system32\netcfg-112896281.txt
2014-03-01 12:40:42 ----D---- C:\Users\Boss\AppData\Roaming\uTorrent
2014-03-01 08:39:34 ----A---- C:\Windows\system32\netcfg-89594453.txt
2014-03-01 08:39:28 ----A---- C:\Windows\system32\netcfg-89588890.txt
2014-02-27 21:47:12 ----A---- C:\Windows\system32\netcfg-43215109.txt
2014-02-27 09:48:34 ----A---- C:\Windows\system32\netcfg-116781.txt
2014-02-26 22:17:36 ----A---- C:\Windows\system32\netcfg-28831109.txt
2014-02-26 22:05:55 ----A---- C:\Windows\system32\netcfg-28130531.txt
2014-02-26 22:05:50 ----A---- C:\Windows\system32\netcfg-28125328.txt
2014-02-26 14:18:01 ----A---- C:\Windows\system32\netcfg-56718.txt
2014-02-26 14:16:26 ----A---- C:\Windows\system32\netcfg-432261640.txt
2014-02-26 08:34:29 ----A---- C:\Windows\system32\netcfg-411745031.txt
2014-02-26 08:34:24 ----A---- C:\Windows\system32\netcfg-411739640.txt
2014-02-25 18:31:32 ----A---- C:\Windows\system32\netcfg-361171578.txt
2014-02-25 18:31:27 ----A---- C:\Windows\system32\netcfg-361166968.txt
2014-02-25 08:26:25 ----A---- C:\Windows\system32\netcfg-324865171.txt
2014-02-25 08:26:20 ----A---- C:\Windows\system32\netcfg-324859687.txt
2014-02-24 22:07:39 ----D---- C:\Users\Boss\AppData\Roaming\Identities
2014-02-24 15:20:00 ----A---- C:\Windows\system32\netcfg-263285000.txt
2014-02-24 15:19:55 ----A---- C:\Windows\system32\netcfg-263279296.txt
2014-02-23 08:34:04 ----A---- C:\Windows\system32\netcfg-152534109.txt
2014-02-23 08:33:59 ----A---- C:\Windows\system32\netcfg-152528453.txt
2014-02-22 18:34:12 ----A---- C:\Windows\system32\netcfg-102146640.txt
2014-02-22 18:34:07 ----A---- C:\Windows\system32\netcfg-102142031.txt
2014-02-22 08:51:42 ----A---- C:\Windows\system32\netcfg-67197015.txt
2014-02-22 08:51:41 ----A---- C:\Windows\system32\netcfg-67195359.txt
2014-02-21 14:12:47 ----A---- C:\Windows\system32\netcfg-65750.txt
2014-02-21 14:10:58 ----A---- C:\Windows\system32\netcfg-1432265.txt
2014-02-21 12:08:35 ----D---- C:\Windows\BrowserChoice
2014-02-21 10:13:39 ----A---- C:\Windows\system32\shell32.dll
2014-02-21 08:54:16 ----D---- C:\Program Files (x86)\Secunia
2014-02-21 08:30:22 ----D---- C:\Windows\system32\MRT
2014-02-19 21:48:07 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-02-19 21:47:43 ----D---- C:\Program Files (x86)\Windows Live
2014-02-19 21:46:34 ----D---- C:\ProgramData\Microsoft SkyDrive
2014-02-19 21:44:18 ----D---- C:\Users\Boss\AppData\Roaming\BSplayer Pro
2014-02-19 21:44:18 ----D---- C:\Users\Boss\AppData\Roaming\BSplayer
2014-02-19 21:44:14 ----D---- C:\Program Files (x86)\Webteh
2014-02-19 21:42:54 ----D---- C:\Users\Boss\AppData\Roaming\rmi
2014-02-19 20:35:21 ----A---- C:\Windows\system32\netcfg-192253328.txt
2014-02-19 20:35:17 ----A---- C:\Windows\system32\netcfg-192248531.txt
2014-02-19 14:05:34 ----A---- C:\Windows\system32\netcfg-168866484.txt
2014-02-19 14:05:29 ----A---- C:\Windows\system32\netcfg-168860796.txt
2014-02-18 14:11:31 ----A---- C:\Windows\system32\netcfg-82827843.txt
2014-02-18 14:11:25 ----A---- C:\Windows\system32\netcfg-82821250.txt
2014-02-18 06:17:49 ----A---- C:\Windows\system32\netcfg-54410500.txt
2014-02-18 06:17:45 ----A---- C:\Windows\system32\netcfg-54406031.txt
2014-02-17 15:11:56 ----A---- C:\Windows\system32\netcfg-57390.txt
2014-02-17 15:10:19 ----A---- C:\Windows\system32\netcfg-666174750.txt
2014-02-17 14:25:48 ----A---- C:\Windows\system32\netcfg-663503531.txt
2014-02-17 14:25:42 ----A---- C:\Windows\system32\netcfg-663497296.txt
2014-02-14 10:44:29 ----A---- C:\Windows\system32\netcfg-391047046.txt
2014-02-14 10:43:03 ----A---- C:\Windows\system32\netcfg-390961359.txt
2014-02-13 22:26:45 ----D---- C:\FFOutput
2014-02-13 22:25:44 ----D---- C:\Program Files (x86)\FreeTime
2014-02-13 22:12:30 ----N---- C:\Windows\system32\pwdspio.sys
2014-02-13 22:12:30 ----N---- C:\Windows\system32\pwdrvio.sys
2014-02-13 22:12:30 ----A---- C:\Windows\system32\pwNative.exe
2014-02-13 22:12:12 ----D---- C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.1.1
2014-02-13 14:02:41 ----A---- C:\Windows\system32\netcfg-316544750.txt
2014-02-13 14:02:35 ----A---- C:\Windows\system32\netcfg-316538640.txt
2014-02-12 16:09:07 ----A---- C:\Windows\system32\netcfg-237734281.txt
2014-02-12 16:09:07 ----A---- C:\Windows\system32\netcfg-237734125.txt
2014-02-12 07:32:24 ----A---- C:\Windows\system32\netcfg-206731640.txt
2014-02-12 07:32:18 ----A---- C:\Windows\system32\netcfg-206725078.txt
2014-02-11 22:33:31 ----D---- C:\Users\Boss\AppData\Roaming\SolidDocuments
2014-02-11 22:20:36 ----A---- C:\Windows\system32\netcfg-173628671.txt
2014-02-11 22:20:31 ----A---- C:\Windows\system32\netcfg-173623265.txt
2014-02-11 13:53:54 ----A---- C:\Windows\system32\netcfg-143231562.txt
2014-02-11 13:53:48 ----A---- C:\Windows\system32\netcfg-143225343.txt
2014-02-10 18:39:30 ----A---- C:\Windows\system32\netcfg-73972375.txt
2014-02-10 17:52:22 ----A---- C:\Windows\system32\netcfg-71144281.txt
2014-02-10 14:26:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-10 14:26:21 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-10 14:24:49 ----D---- C:\Program Files (x86)\XBMC
2014-02-10 09:50:26 ----D---- C:\Program Files\Microsoft Silverlight
2014-02-10 09:50:26 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-02-10 07:56:03 ----A---- C:\Windows\system32\netcfg-35366000.txt
2014-02-10 07:55:59 ----A---- C:\Windows\system32\netcfg-35361328.txt
2014-02-09 22:21:47 ----D---- C:\Program Files (x86)\Google
2014-02-09 22:10:44 ----D---- C:\Windows\AutoKMS
2014-02-09 22:08:26 ----A---- C:\Windows\system32\netcfg-112203.txt
2014-02-09 22:05:59 ----A---- C:\Windows\system32\netcfg-714906.txt
2014-02-09 21:58:34 ----D---- C:\Program Files\Microsoft Office
2014-02-09 21:55:45 ----A---- C:\Windows\system32\netcfg-101640.txt
2014-02-09 21:53:31 ----A---- C:\Windows\system32\netcfg-28797968.txt
2014-02-09 21:05:57 ----A---- C:\Windows\system32\netcfg-25944171.txt
2014-02-09 21:05:17 ----A---- C:\Windows\system32\netcfg-25903968.txt
2014-02-09 20:42:57 ----D---- C:\Users\Boss\AppData\Roaming\Macromedia
2014-02-09 20:32:01 ----A---- C:\Windows\system32\netcfg-23908437.txt
2014-02-09 20:24:13 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-02-09 20:18:55 ----A---- C:\Windows\system32\netcfg-23122562.txt
2014-02-09 18:17:47 ----D---- C:\Users\Boss\AppData\Roaming\HP
2014-02-09 18:17:12 ----D---- C:\ProgramData\HPSSUPPLY
2014-02-09 18:16:32 ----N---- C:\Windows\system32\hppfaxprintermonui5.dll
2014-02-09 18:16:32 ----N---- C:\Windows\system32\hppfaxprintermon5.dll
2014-02-09 18:16:31 ----ASH---- C:\Windows\system32\winzvprt5.sys
2014-02-09 18:16:31 ----A---- C:\Windows\system32\hppfaxprinter5.ini
2014-02-09 18:13:14 ----A---- C:\Windows\SYSWOW64\hpcdmc32.DLL
2014-02-09 18:13:14 ----A---- C:\Windows\SYSWOW64\hpcc3093.DLL
2014-02-09 18:13:14 ----A---- C:\Windows\system32\hpcpn093.dll
2014-02-09 18:13:13 ----A---- C:\Windows\SYSWOW64\fxcompchannel.dll
2014-02-09 18:12:50 ----D---- C:\Program Files (x86)\HP
2014-02-09 18:12:48 ----HD---- C:\Config.Msi
2014-02-09 18:11:49 ----N---- C:\Windows\hppmdl07.dat
2014-02-09 18:11:49 ----A---- C:\Windows\system32\hppins07.dat
2014-02-09 18:11:49 ----A---- C:\Windows\hppins07.dat
2014-02-09 18:10:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-02-09 18:09:51 ----D---- C:\Windows\SYSWOW64\XPSViewer
2014-02-09 18:09:47 ----D---- C:\Program Files\Reference Assemblies
2014-02-09 18:09:47 ----D---- C:\Program Files\MSBuild
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-09 18:07:53 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-02-09 18:07:53 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2014-02-09 18:07:53 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64gen.sys
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64fax.sys
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64bulk.sys
2014-02-09 18:04:42 ----A---- C:\Windows\system32\hpxp2727_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\SYSWOW64\hpptsp02.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hpptsp02_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppdpr07_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppdew07_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppasc07_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppafx07_x64.dll
2014-02-09 18:04:40 ----A---- C:\Windows\SYSWOW64\hpbcfgre.DLL
2014-02-09 18:04:40 ----A---- C:\Windows\SYSWOW64\fxfaxchannel.dll
2014-02-09 18:04:24 ----A---- C:\Windows\system32\hppapr07.dat
2014-02-09 18:04:06 ----D---- C:\M2727_Full_Solution_Win7_5_2_EMEA2
2014-02-09 17:58:48 ----D---- C:\Users\Boss\AppData\Roaming\Scan2PDF
2014-02-09 17:58:44 ----D---- C:\Program Files (x86)\Scan2PDF
2014-02-09 17:41:05 ----D---- C:\Program Files\CCleaner
2014-02-09 17:33:05 ----D---- C:\Users\Boss\AppData\Roaming\Dream Aquarium
2014-02-09 17:32:45 ----D---- C:\Program Files (x86)\Dream Aquarium
2014-02-09 16:49:43 ----A---- C:\Windows\system32\netcfg-10569875.txt
2014-02-09 16:49:43 ----A---- C:\Windows\system32\netcfg-10569734.txt

2014-02-09 14:12:33 ----A---- C:\Windows\system32\netcfg-1139875.txt
2014-02-09 13:35:25 ----D---- C:\Program Files (x86)\MSBuild
2014-02-09 13:32:49 ----D---- C:\ProgramData\Microsoft Help
2014-02-09 13:24:57 ----D---- C:\Users\Boss\AppData\Roaming\Zoner
2014-02-09 13:24:40 ----D---- C:\ProgramData\Zoner
2014-02-09 13:24:19 ----D---- C:\Program Files\Zoner
2014-02-09 13:23:57 ----A---- C:\Windows\system32\netcfg-85563843.txt
2014-02-09 12:57:18 ----A---- C:\Windows\system32\netcfg-83964625.txt
2014-02-09 12:53:37 ----A---- C:\Windows\system32\netcfg-83744015.txt
2014-02-09 12:52:03 ----A---- C:\Windows\system32\netcfg-83649640.txt
2014-02-09 12:52:00 ----A---- C:\Windows\system32\netcfg-83646796.txt
2014-02-09 10:51:39 ----D---- C:\Users\Boss\AppData\Roaming\Q-Dir
2014-02-09 10:51:37 ----D---- C:\Program Files (x86)\Q-Dir
2014-02-09 10:51:19 ----A---- C:\Windows\Q-Dir.ini
2014-02-09 10:24:15 ----D---- C:\Program Files (x86)\RocketDock
2014-02-09 10:16:07 ----D---- C:\ProgramData\HP
2014-02-09 10:16:03 ----D---- C:\ProgramData\Hewlett-Packard
2014-02-09 10:15:58 ----A---- C:\Windows\HPMProp.INI
2014-02-09 10:15:45 ----A---- C:\Windows\SYSWOW64\hppccompio.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hppdcompio.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmtp160.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmpw081.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmpm081.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmml160.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmlm135.dll
2014-02-09 10:15:45 ----A---- C:\Windows\system32\hpmja160.dll
2014-02-09 10:15:44 ----A---- C:\Windows\system32\hpcpn160.dll
2014-02-09 10:15:44 ----A---- C:\Windows\system32\hpcjpm.dll
2014-02-09 10:15:43 ----A---- C:\Windows\SYSWOW64\hpcc3160.dll
2014-02-09 10:15:43 ----A---- C:\Windows\system32\FxCompChannel_x64.dll
2014-02-09 10:13:30 ----D---- C:\HP Universal Print Driver
2014-02-09 09:07:21 ----A---- C:\Windows\system32\netcfg-70168031.txt
2014-02-09 09:07:16 ----A---- C:\Windows\system32\netcfg-70162281.txt
2014-02-08 19:52:09 ----A---- C:\Windows\system32\netcfg-22459125.txt
2014-02-08 19:52:08 ----A---- C:\Windows\system32\netcfg-22457578.txt
2014-02-08 18:00:09 ----A---- C:\Windows\system32\netcfg-15738468.txt
2014-02-08 17:59:29 ----A---- C:\Windows\system32\netcfg-15698750.txt
2014-02-08 17:59:22 ----A---- C:\Windows\system32\netcfg-15691875.txt
2014-02-08 12:58:21 ----A---- C:\Windows\system32\netcfg-1369062.txt
2014-02-08 12:56:26 ----A---- C:\Windows\system32\netcfg-1253875.txt
2014-02-08 12:56:25 ----A---- C:\Windows\system32\netcfg-1252953.txt
2014-02-08 12:43:44 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-02-08 12:43:42 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-02-08 12:43:42 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-02-08 12:43:42 ----A---- C:\Windows\SYSWOW64\java.exe
2014-02-08 12:39:00 ----A---- C:\Windows\system32\netcfg-211187.txt
2014-02-08 12:31:11 ----A---- C:\Windows\system32\netcfg-2569390.txt
2014-02-08 12:29:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-02-08 12:29:34 ----D---- C:\ProgramData\NVIDIA
2014-02-08 12:29:26 ----A---- C:\Windows\system32\nvvsvc.exe
2014-02-08 12:29:26 ----A---- C:\Windows\system32\nvsvcr.dll
2014-02-08 12:29:26 ----A---- C:\Windows\system32\nvsvc64.dll
2014-02-08 12:29:26 ----A---- C:\Windows\system32\nvshext.dll
2014-02-08 12:29:25 ----A---- C:\Windows\system32\nvmctray.dll
2014-02-08 12:29:25 ----A---- C:\Windows\system32\nvcpl.dll
2014-02-08 12:28:55 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-02-08 12:28:55 ----A---- C:\Windows\system32\OpenCL.dll
2014-02-08 12:28:41 ----D---- C:\ProgramData\NVIDIA Corporation
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-02-08 12:27:51 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvopencl.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvoglv64.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvdispgenco64.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvdispco64.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvcuvid.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\nvcuda.dll
2014-02-08 12:27:51 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-02-08 12:27:48 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-02-08 12:27:48 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-02-08 12:27:48 ----A---- C:\Windows\system32\nvcompiler.dll
2014-02-08 12:27:48 ----A---- C:\Windows\system32\nvapi64.dll
2014-02-08 12:27:31 ----D---- C:\Program Files\NVIDIA Corporation
2014-02-08 12:11:01 ----D---- C:\Users\Boss\AppData\Roaming\LibreOffice
2014-02-08 12:10:49 ----D---- C:\Users\Boss\AppData\Roaming\Ashampoo
2014-02-08 12:09:56 ----D---- C:\ProgramData\ashampoo
2014-02-08 12:09:44 ----D---- C:\Program Files (x86)\Ashampoo
2014-02-08 12:04:32 ----D---- C:\Program Files (x86)\IrfanView
2014-02-08 12:03:54 ----D---- C:\Users\Boss\AppData\Roaming\vlc
2014-02-08 12:02:47 ----D---- C:\Program Files\VideoLAN
2014-02-08 11:59:37 ----D---- C:\Program Files (x86)\Adobe
2014-02-08 11:59:22 ----D---- C:\ProgramData\Adobe
2014-02-08 11:55:14 ----N---- C:\Windows\system32\MpSigStub.exe
2014-02-08 11:53:04 ----D---- C:\ProgramData\Sun
2014-02-08 11:53:02 ----D---- C:\ProgramData\Oracle
2014-02-08 11:52:29 ----D---- C:\Program Files (x86)\Java
2014-02-08 11:51:49 ----D---- C:\Windows\SoftwareDistribution
2014-02-08 11:50:45 ----D---- C:\totalcmd
2014-02-08 11:50:05 ----A---- C:\Windows\system32\netcfg-103718.txt
2014-02-08 11:50:02 ----A---- C:\Windows\system32\netcfg-100687.txt
2014-02-08 11:50:02 ----A---- C:\Windows\system32\netcfg-100625.txt
2014-02-08 11:49:58 ----A---- C:\Windows\system32\netcfg-95859.txt
2014-02-07 15:13:22 ----A---- C:\Windows\slsvc.exe
2014-02-07 15:13:22 ----A---- C:\Windows\SLCHook.dll
2014-02-07 15:13:22 ----A---- C:\Windows\PersonalizeEnabler.exe
2014-02-07 15:13:22 ----A---- C:\Windows\EasyHook64.dll
2014-02-07 15:12:52 ----RSHD---- C:\Windows Activation Technologies
2014-02-07 15:06:23 ----D---- C:\Users\Boss\AppData\Roaming\Adobe
2014-02-07 15:05:42 ----D---- C:\ProgramData\PRICache
2014-02-07 15:05:23 ----SD---- C:\Users\Boss\AppData\Roaming\Microsoft
2014-02-07 15:05:23 ----D---- C:\Windows\CSC
2014-02-07 15:04:27 ----SHD---- C:\Recovery
2014-02-07 15:04:27 ----SHD---- C:\ProgramData\Šablony
2014-02-07 15:04:26 ----SHD---- C:\ProgramData\Plocha
2014-02-07 15:04:26 ----SHD---- C:\ProgramData\Nabídka Start
2014-02-07 15:04:26 ----SHD---- C:\ProgramData\Dokumenty
2014-02-07 15:04:26 ----SHD---- C:\ProgramData\Data aplikací
2014-02-07 15:04:07 ----ASH---- C:\hiberfil.sys
2014-02-07 15:02:01 ----A---- C:\Windows\system32\netcfg-71296.txt
2014-02-07 15:01:58 ----A---- C:\Windows\system32\netcfg-68390.txt
2014-02-07 15:01:55 ----A---- C:\Windows\system32\netcfg-65609.txt
2014-02-07 15:01:55 ----A---- C:\Windows\system32\netcfg-65203.txt
2014-02-07 15:01:55 ----A---- C:\Windows\system32\netcfg-64796.txt
2014-02-07 15:01:54 ----A---- C:\Windows\system32\netcfg-64453.txt
2014-02-07 15:01:54 ----A---- C:\Windows\system32\netcfg-64062.txt
2014-02-07 15:01:53 ----A---- C:\Windows\system32\netcfg-63671.txt
2014-02-07 15:01:53 ----A---- C:\Windows\system32\netcfg-63328.txt
2014-02-07 15:01:53 ----A---- C:\Windows\system32\netcfg-62968.txt
2014-02-07 15:01:50 ----A---- C:\Windows\system32\netcfg-60593.txt
2014-02-07 15:01:50 ----A---- C:\Windows\system32\netcfg-60234.txt
2014-02-07 15:01:49 ----A---- C:\Windows\system32\netcfg-59609.txt
2014-02-07 15:01:44 ----D---- C:\Windows\Prefetch
2014-02-07 15:01:02 ----ASH---- C:\swapfile.sys
2014-02-07 15:01:02 ----ASH---- C:\pagefile.sys
2014-02-07 15:00:26 ----D---- C:\Windows\Panther
2014-02-07 15:00:15 ----RASH---- C:\BOOTSECT.BAK
2014-02-07 15:00:13 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 month======

2014-03-05 21:48:55 ----RD---- C:\Program Files
2014-03-05 21:47:51 ----D---- C:\Windows\Tasks
2014-03-05 21:47:05 ----D---- C:\Windows\Temp
2014-03-05 21:46:42 ----D---- C:\Windows\system32\config
2014-03-05 21:44:16 ----SHD---- C:\Windows\Installer
2014-03-05 21:44:09 ----D---- C:\Windows\Microsoft.NET
2014-03-05 21:44:07 ----RSD---- C:\Windows\assembly
2014-03-05 21:43:29 ----SD---- C:\ProgramData\Microsoft
2014-03-05 21:43:29 ----RD---- C:\Program Files (x86)
2014-03-05 21:43:29 ----D---- C:\Windows
2014-03-05 21:43:29 ----D---- C:\Program Files\Common Files\microsoft shared
2014-03-05 21:42:45 ----RSD---- C:\Windows\Fonts
2014-03-05 21:42:31 ----RD---- C:\Windows\System32
2014-03-05 21:42:31 ----D---- C:\Program Files\Common Files
2014-03-05 21:41:50 ----D---- C:\Windows\ShellNew
2014-03-05 21:41:38 ----A---- C:\Windows\win.ini
2014-03-05 21:39:45 ----SHD---- C:\System Volume Information
2014-03-05 20:00:00 ----D---- C:\Windows\system32\sru
2014-03-03 11:20:27 ----HD---- C:\Program Files\WindowsApps
2014-03-03 11:20:27 ----D---- C:\Windows\AUInstallAgent
2014-03-02 22:00:11 ----D---- C:\Windows\system32\Tasks
2014-03-02 21:56:41 ----D---- C:\Windows\Inf
2014-03-02 13:23:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-26 14:18:06 ----D---- C:\Windows\system32\catroot2
2014-02-26 09:50:21 ----HD---- C:\ProgramData
2014-02-26 09:49:15 ----HD---- C:\Windows\system32\GroupPolicy
2014-02-21 14:34:29 ----D---- C:\Windows\SysWOW64
2014-02-21 14:14:12 ----D---- C:\Windows\system32\DriverStore
2014-02-21 14:14:12 ----D---- C:\Windows\system32\catroot
2014-02-21 14:07:23 ----D---- C:\Windows\CbsTemp
2014-02-21 14:06:46 ----D---- C:\Windows\WinSxS
2014-02-21 13:46:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-21 13:46:24 ----D---- C:\Windows\system32\wbem
2014-02-21 13:46:23 ----D---- C:\Windows\system32\cs-CZ
2014-02-21 13:46:22 ----D---- C:\Windows\servicing
2014-02-21 13:44:27 ----D---- C:\Windows\SYSWOW64\Bthprops
2014-02-21 13:44:27 ----D---- C:\Windows\system32\Bthprops
2014-02-21 13:44:22 ----RD---- C:\Windows\ToastData
2014-02-21 13:44:22 ----D---- C:\Windows\WinStore
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\ras
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\MSDRM
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\migration
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-21 13:44:22 ----D---- C:\Windows\SYSWOW64\Dism
2014-02-21 13:44:22 ----D---- C:\Windows\system32\SecureBootUpdates
2014-02-21 13:44:21 ----RD---- C:\Windows\ImmersiveControlPanel
2014-02-21 13:44:21 ----D---- C:\Windows\system32\ras
2014-02-21 13:44:21 ----D---- C:\Windows\system32\oobe
2014-02-21 13:44:21 ----D---- C:\Windows\system32\MSDRM
2014-02-21 13:44:21 ----D---- C:\Windows\system32\migration
2014-02-21 13:44:21 ----D---- C:\Windows\system32\en-US
2014-02-21 13:44:21 ----D---- C:\Windows\system32\drivers\UMDF
2014-02-21 13:44:21 ----D---- C:\Windows\system32\Drivers
2014-02-21 13:44:21 ----D---- C:\Windows\system32\Dism
2014-02-21 13:44:21 ----D---- C:\Windows\system32\CodeIntegrity
2014-02-21 13:44:21 ----D---- C:\Windows\system32\Boot
2014-02-21 13:44:21 ----D---- C:\Windows\PolicyDefinitions
2014-02-21 13:44:21 ----D---- C:\Windows\L2Schemas
2014-02-21 13:44:21 ----D---- C:\Windows\apppatch
2014-02-21 13:44:21 ----D---- C:\Program Files\Windows Photo Viewer
2014-02-21 13:44:21 ----D---- C:\Program Files\Windows Media Player
2014-02-21 13:44:21 ----D---- C:\Program Files\Windows Journal
2014-02-21 13:44:21 ----D---- C:\Program Files\Windows Defender
2014-02-21 13:44:21 ----D---- C:\Program Files\Internet Explorer
2014-02-21 13:44:21 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-02-21 13:44:21 ----D---- C:\Program Files (x86)\Windows Media Player
2014-02-21 13:44:21 ----D---- C:\Program Files (x86)\Windows Defender
2014-02-21 13:44:21 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-21 13:42:34 ----D---- C:\Windows\rescache
2014-02-21 13:23:29 ----D---- C:\Windows\registration
2014-02-21 13:21:51 ----D---- C:\Windows\system32\Sysprep
2014-02-21 13:11:23 ----D---- C:\Windows\Logs
2014-02-21 08:30:22 ----D---- C:\Windows\debug
2014-02-19 21:45:14 ----D---- C:\Program Files (x86)\Common Files
2014-02-19 20:54:35 ----D---- C:\Windows\LiveKernelReports
2014-02-10 18:25:21 ----D---- C:\Windows\system32\NDF
2014-02-09 22:00:39 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-02-09 21:58:48 ----D---- C:\Program Files\Common Files\System
2014-02-09 18:09:51 ----D---- C:\Windows\SYSWOW64\MUI
2014-02-09 18:09:50 ----D---- C:\Windows\system32\MUI
2014-02-08 12:56:23 ----D---- C:\Windows\system32\wdi
2014-02-08 12:29:39 ----RD---- C:\Users
2014-02-08 12:29:21 ----D---- C:\Windows\Help
2014-02-08 12:00:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-08 11:52:15 ----D---- C:\Windows\system32\restore
2014-02-07 15:11:07 ----SHD---- C:\$Recycle.Bin
2014-02-07 15:04:27 ----D---- C:\Windows\system32\Recovery
2014-02-07 15:04:27 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys [2012-07-26 424688]
R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys [2012-07-26 77040]
R0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys [2012-07-26 25840]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys [2012-07-26 361200]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2012-07-26 562400]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys [2012-07-26 102640]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys [2012-07-26 71920]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys [2012-07-26 374512]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2012-07-26 465136]
R0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys [2012-07-26 18672]
R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [2012-07-26 100080]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2012-07-26 172272]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys [2012-07-26 93936]
R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys [2012-07-26 17136]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys [2012-07-26 83696]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys [2012-07-26 1000688]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys [2012-07-26 91888]
R0 pci;@machine.inf,%pci_svcdesc%;PCI Bus Driver; C:\Windows\System32\drivers\pci.sys [2012-07-26 234224]
R0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys [2012-07-26 14064]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2012-07-26 52464]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys [2012-07-26 68848]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-07-26 217328]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys [2012-07-26 283888]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys [2012-07-26 2224880]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys [2012-07-26 36080]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys [2012-07-26 83184]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2012-07-26 378608]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys [2012-07-26 332016]
R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\Windows\system32\drivers\Wdf01000.sys [2012-07-26 785512]
R0 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\Windows\system32\drivers\WdFilter.sys [2012-07-26 258288]
R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\Windows\system32\DRIVERS\wfplwfs.sys [2012-07-26 96496]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys [2012-07-26 561152]
R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [2012-07-26 48640]
R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys [2012-07-26 29696]
R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys [2012-07-26 7680]
R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys [2012-07-26 174080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2012-07-26 571392]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys [2012-07-26 118784]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2012-07-26 50688]
R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys [2012-07-26 26112]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys [2012-07-26 37616]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys [2012-07-26 46080]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys [2012-07-26 331776]
R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys [2012-07-26 49152]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys [2012-07-26 23552]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2012-07-26 34304]
R1 Null;Null; C:\Windows\system32\drivers\Null.sys [2012-07-26 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys [2012-07-26 145408]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys [2012-07-26 423936]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2012-07-26 117248]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 83456]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys [2012-07-26 60416]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2012-07-26 134144]
R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys [2012-07-26 427520]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys [2012-07-26 97792]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2012-07-26 804864]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys [2012-07-26 78848]
R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys [2012-07-26 23040]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2012-07-26 45056]
R3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys [2012-07-26 226304]
R3 AVerA706_x64;@oem3.inf,%DISPLAY_NAME%;AVerMedia A706 BDA Service; C:\Windows\system32\DRIVERS\AVerA706_x64.sys [2009-06-10 1422080]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2012-07-26 101888]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys [2012-07-26 36352]
R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys [2012-07-26 33792]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2012-07-26 1448688]
R3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys [2012-07-26 210672]
R3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2012-07-26 339968]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys [2012-07-26 71168]
R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys [2012-07-26 27648]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys [2012-07-26 859136]
R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys [2012-07-26 89088]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\Windows\System32\drivers\kbdclass.sys [2012-07-26 48368]
R3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys [2012-07-26 29184]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Miniport ladění jádra společnosti Microsoft (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys [2012-07-26 18432]
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys [2012-07-26 21376]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2012-07-26 30720]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\Windows\System32\drivers\mouclass.sys [2012-07-26 45808]
R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys [2012-07-26 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2012-07-26 74752]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys [2012-07-26 368128]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2012-07-26 279552]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2012-07-26 214016]
R3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys [2012-07-26 68608]
R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys [2012-07-26 25088]
R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys [2012-07-26 58880]
R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys [2012-07-26 60416]
R3 netr28ux;@netr28ux.inf,%Generic.Service.DispName%;RT2870 – ovladač rozšiřitelné karty USB pro bezdrátovou síť LAN; C:\Windows\system32\DRIVERS\netr28ux.sys [2012-06-02 1855520]
R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys [2012-07-26 1934064]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-01-03 13533624]
R3 Parport;@msports.inf,%Parport.SVCDESC%;Ovladač paralelního portu; C:\Windows\System32\drivers\parport.sys [2012-07-26 105984]
R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys [2012-07-26 114176]
R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;Připojení WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2012-07-26 68608]
R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys [2012-07-26 124928]
R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys [2012-07-26 81920]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2012-07-26 92672]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys [2012-07-26 22528]
R3 Serenum;@msports.inf,%Serenum.SVCDESC%;Ovladač filtru Serenum; C:\Windows\System32\drivers\serenum.sys [2012-07-26 23040]
R3 Serial;@msports.inf,%Serial.SVCDESC%;Ovladač sériového portu; C:\Windows\System32\drivers\serial.sys [2012-07-26 76800]
R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys [2012-07-26 416768]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2012-07-26 619520]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2012-07-26 248832]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys [2012-07-26 13680]
R3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys [2012-07-26 148720]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2012-07-26 149504]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys [2012-07-26 48128]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver; C:\Windows\System32\drivers\usbccgp.sys [2012-07-26 120832]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\Windows\System32\drivers\usbehci.sys [2012-07-26 78576]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\Windows\System32\drivers\usbhub.sys [2012-07-26 496368]
R3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\Windows\System32\drivers\USBSTOR.SYS [2012-07-26 119024]
R3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys [2012-07-26 32256]
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2012-07-26 24064]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
R3 WpdUpFltr;@%systemroot%\System32\drivers\WpdUpFltr.sys,-100; C:\Windows\System32\drivers\WpdUpFltr.sys [2012-07-26 19968]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 87040]
R3 WUDFRd;@hidbthle.inf,%WudfRdDisplayName%;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\Windows\System32\drivers\WUDFRd.sys [2012-07-26 198656]
R3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 yukonw8;@netmyk64.inf,%yk63x64.DriverDesc%;NDIS6.3 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk63x64.sys [2012-06-02 287232]
S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys [2012-07-26 106736]
S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys [2012-07-26 492272]
S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys [2012-07-26 340720]
S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys [2012-07-26 184048]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys [2012-07-26 63216]
S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys [2012-07-26 76016]
S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys [2012-07-26 258288]
S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys [2012-07-26 26352]
S0 arc;arc; C:\Windows\System32\drivers\arc.sys [2012-07-26 104688]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys [2012-07-26 108272]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\Windows\System32\drivers\bxvbda.sys [2012-07-26 539376]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\System32\drivers\evbda.sys [2012-07-26 3295984]
S0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys [2012-07-26 81136]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys [2012-07-26 113904]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\System32\drivers\gagp30kx.sys [2012-07-26 66800]
S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [2012-07-26 64752]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2012-07-26 24816]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys [2012-07-26 411888]
S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys [2012-07-26 45296]
S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys [2012-07-26 22256]
S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [2012-07-26 108784]
S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [2012-07-26 92400]
S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys [2012-07-26 116976]
S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [2012-07-26 81136]
S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys [2012-07-26 51952]
S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys [2012-07-26 353008]
S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys [2012-07-26 64240]
S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys [2012-07-26 52464]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys [2012-07-26 125168]
S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys [2012-07-26 150256]
S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys [2012-07-26 168176]
S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys [2012-07-26 237808]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys [2012-07-26 107760]
S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [2012-07-26 44784]
S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [2012-07-26 81648]
S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys [2012-07-26 30960]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\Windows\System32\drivers\storahci.sys [2012-07-26 77552]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2012-07-26 45160]
S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys [2012-07-26 37992]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Microsoft AGPv3.5 Filter; C:\Windows\System32\drivers\uagp35.sys [2012-07-26 65776]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys [2012-07-26 66800]
S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys [2012-07-26 19184]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys [2012-07-26 137832]
S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys [2012-07-26 164080]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys [2012-07-26 322800]
S0 Wd;@wd.inf,%WdServiceDisplayName%;Microsoft Watchdog Timer Driver; C:\Windows\System32\drivers\wd.sys [2012-07-26 23792]
S0 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\Windows\system32\drivers\WdBoot.sys [2012-07-26 34216]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys [2012-07-26 55024]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys [2012-07-26 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys [2012-07-26 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys [2012-07-26 10752]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys [2012-07-26 90624]
S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys [2012-07-26 88064]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2012-07-26 79360]
S3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys [2012-07-26 26624]
S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2012-07-26 31104]
S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-07-26 29952]
S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\Windows\System32\drivers\bthmodem.sys [2012-07-26 65536]
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys [2012-07-26 45056]
S3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys [2012-07-26 25600]
S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys [2012-07-26 33280]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Ovladače zvuku považované společností Microsoft za důvěryhodné; C:\Windows\system32\drivers\drmkaud.sys [2012-07-26 5632]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys [2012-07-26 10240]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2012-07-26 194560]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys [2012-07-26 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2012-07-26 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys [2012-07-26 24576]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2012-07-26 57584]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys [2012-07-26 22528]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter; C:\Windows\System32\drivers\vmgencounter.sys [2012-07-26 12288]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys [2012-07-26 120048]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys [2012-07-26 27136]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys [2012-07-26 95744]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys [2012-07-26 38400]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys [2012-07-26 46080]
S3 HPFXBULK;HPFXBULK; C:\Windows\system32\drivers\hpfx64bulk.sys [2007-07-16 20504]
S3 HPFXFAX;HPFXFAX; C:\Windows\system32\drivers\hpfx64fax.sys [2007-07-16 23064]
S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [2012-07-26 11776]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2012-07-26 24576]
S3 i8042prt;@keyboard.inf,%i8042prt.SvcDesc%;i8042 Keyboard and PS/2 Mouse Port Driver; C:\Windows\System32\drivers\i8042prt.sys [2012-07-26 112640]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys [2012-07-26 89088]
S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [2012-07-26 78336]
S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys [2012-07-26 145920]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys [2012-07-26 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys [2012-07-26 277744]
S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys [2012-07-26 40448]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys [2012-07-26 141312]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-07-26 129536]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys [2012-07-26 28400]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2012-07-26 8704]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys [2012-07-26 10752]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2012-07-26 11008]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2012-07-26 7168]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2012-07-26 6912]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2012-07-26 390896]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2012-07-26 8192]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys [2012-07-26 14848]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys [2012-07-26 46592]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [2012-07-26 126464]
S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys [2012-07-26 87552]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2012-07-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys [2012-07-26 16384]
S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys [2012-07-26 179712]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-07-26 27888]
S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys [2012-07-26 208384]
S3 RTL8192su;@net8192su64.inf,%RTL8192su.DeviceDesc.DispName%;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys [2012-06-02 693864]
S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys [2012-07-26 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2012-07-26 36864]
S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys [2012-07-26 193264]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys [2012-07-26 56560]
S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys [2012-07-26 62976]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys [2012-07-26 27136]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys [2012-07-26 16896]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys [2012-07-26 59392]
S3 storvsp;storvsp; C:\Windows\System32\drivers\storvsp.sys [2012-07-26 67584]
S3 Synth3dVsc;@synth3dvsc.inf,%Synth3dVsc.SVCDESC%;Microsoft Virtual 3D Video Transport Driver; C:\Windows\System32\drivers\Synth3dVsc.sys [2012-07-26 53352]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2012-07-26 2224880]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys [2012-07-26 36592]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-07-26 57344]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys [2012-07-26 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2012-07-26 115712]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys [2012-07-26 97008]
S3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys [2012-07-26 212208]
S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys [2012-07-26 11776]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys [2012-07-26 99328]
S3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys [2012-07-26 445168]
S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys [2012-07-26 27136]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys [2012-07-26 25600]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2012-07-26 42496]
S3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS [2012-07-26 337136]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys [2012-07-26 106224]
S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys [2012-07-26 496368]
S3 Vid;Vid; C:\Windows\System32\drivers\Vid.sys [2012-07-26 203776]
S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [2012-07-26 22144]
S3 vmbusr;@%SystemRoot%\system32\vmbusres.dll,-1001; C:\Windows\System32\drivers\vmbusr.sys [2012-07-26 117248]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\Windows\System32\drivers\vpci.sys [2012-07-26 67824]
S3 vpcivsp;@wvpcivsp.inf,%vpcivsp.SVCDESC%;Microsoft Hyper-V PCI Server; C:\Windows\System32\drivers\vpcivsp.sys [2012-07-26 66048]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys [2012-07-26 27008]
S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys [2012-07-26 83456]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2012-07-26 33520]
S3 WmiAcpi;@wmiacpi.inf,%WMIMAP.SvcDesc%;Microsoft Windows Management Interface for ACPI; C:\Windows\System32\drivers\wmiacpi.sys [2012-07-26 17408]
S3 wpcfltr;Family Safety Filter Driver; C:\Windows\system32\DRIVERS\wpcfltr.sys [2012-07-26 45056]
S4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys [2012-07-26 108544]
S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys [2012-07-26 321024]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; C:\Windows\system32\drivers\ws2ifsl.sys [2012-07-26 22528]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-03 878520]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-01-03 1259448]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe [2012-07-26 35840]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 slsvc;Software Licensing Service; C:\Windows\slsvc.exe [2012-09-25 10240]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe [2012-07-26 769024]
R2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2012-07-26 4881408]
R2 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310; C:\Program Files\Windows Defender\MsMpEng.exe [2012-07-26 15440]
R2 Winmgmt;@%Systemroot%\system32\wbem\wmisvc.dll,-205; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 WlanSvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files\Windows Media Player\wmpnetwk.exe [2012-07-26 1314304]
R2 wscsvc;@%SystemRoot%\System32\wscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2012-07-26 816128]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2012-07-26 35840]
R3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe [2012-07-26 124416]
R3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 wuauserv;@%systemroot%\system32\wuaueng.dll,-105; C:\Windows\system32\svchost.exe [2012-07-26 30208]
R3 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-09 116648]
S2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-11-12 136192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21 257928]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe [2012-07-26 94208]
S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe [2012-07-26 10752]
S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2012-07-26 35840]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2012-07-26 669696]
S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-09 116648]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe [2012-07-26 144384]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe [2012-07-26 35840]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2012-07-26 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe [2012-07-26 9728]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2012-07-26 14848]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2012-07-26 94208]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2012-07-26 40960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2012-07-26 35840]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2012-07-26 680960]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\Windows\system32\vssvc.exe [2012-07-26 1482752]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2012-07-26 1616896]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 WebClient;@%systemroot%\system32\webclnt.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 wlidsvc;@%SystemRoot%\system32\wlidsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 wmiApSrv;@%Systemroot%\system32\wbem\wmiapsrv.exe,-110; C:\Windows\system32\wbem\WmiApSrv.exe [2012-07-26 198144]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S3 WSService;@%SystemRoot%\system32\WSService.dll,-103; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-12 139696]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\Windows\System32\svchost.exe [2012-07-26 30208]
S4 RemoteRegistry;@regsvc.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe [2012-07-26 30208]
S4 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\Windows\System32\svchost.exe [2012-07-26 30208]

-----------------EOF-----------------

jhemza píše:
Roli píše:
jhemza píše:Jaký doporučuješ antivir
Pokud antivir zdarma tak Avast.
Nemusí být nutně zdarma. Co Eset?

ESET ano.

jhemza píše:
Roli píše:
jhemza píše:...... co dále pravidelně používat, aby se člověk ubránil?
To aby se člověk ubránil napadení, není ani tak o zabezpečení ale právě o tom člověku.
OK, takže neklikat na všechno a nestahovat všechno ) Tak nějak?

Ano neklikat na blbosti, stahovat s rozumem.

jhemza píše:
Roli píše:
jhemza píše:Mohl bys mi projít ještě stolní PC? Můžu sem dát log z RSIT?
Ano dej mi sem log i z druhého PC.
Ve stolním PC mi nějaký minerd.exe roztáčí procesor ke 100% (

Jdeme na to.

Tak jak jsme začali, tak jsme zase zkončili, to že tam máš stádo šmejdů s tím si poradím, ale s tím nelegálním produktem Microsoftu nee

Co tam je tentokrát? Office tam nemám

Můžeš mi prosím napsat co je tam za problém?
Jsem jen uživatel. Z logu nic nepoznám.
Díky

jhemza píše:Co tam je tentokrát? Office tam nemám

Ale já tam Office vidím i s crackem :

C:\Program Files\Microsoft Office

Byl to asi nějakej pozůstatek po Office.
Mělo by to být všechno pryč.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Boss at 2014-03-08 09:09:26
Microsoft Windows 8 Enterprise
System drive C: has 169 GB (84%) free of 200 GB
Total RAM: 3070 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:09:28, on 8. 3. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Boss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [mnccfrpSrv] C:\Windows\inf\mnccfrp.vbe
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT\"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [mine] C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Boss\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Service 16] "C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXEC:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Boss\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8844 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {10bcd5e6-ffa5-463a-9b5a5ab887904947}
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\slsvc.exe
C:\Windows\PersonalizeEnabler.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-430fdc1c-e60a-4e39-966a-32c0fd366432 -SystemEventPortName:HostProcess-244f9035-320c-4f34-9a3c-a9a6d9b621ec -IoCancelEventPortName:HostProcess-659e9950-adfe-499d-906f-31b1574ab366 -NonStateChangingEventPortName:HostProcess-033f0c04-9ee2-42dd-b707-f0f5fd18c553 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:39e8a5f3-b542-4acf-bd9d-c559bd070a76 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\System32\WinLogon.exe -SpecialSession
-hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session
taskhostex.exe
C:\Windows\Explorer.EXE
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\HP\hp laserjet m2727\hppfaxprintersrv.exe" "HP LaserJet M2727 MFP Series Fax"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe"
"C:\Windows\SysWOW64\cmd.exe" /K CD C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64 & mine.bat
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2644 CREDAT:267545 /prefetch:2
taskeng.exe {19D48F5D-AE80-41DD-B01B-377D20F88B09}
C:\Windows\system32\PrintIsolationHost.exe -Embedding
"C:\Users\Boss\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1346679843-698221237-303718712-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1346679843-698221237-303718712-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP LaserJet M2727 MFP Series Fax"=C:\Program Files (x86)\HP\hp LaserJet M2727\hppfaxprintersrv.exe [2009-09-22 3700736]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Boss\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-08 136176]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Zoner Photo Studio Service 16"=C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2014-01-30 21822128]
"NextLive"=C:\Windows\SysWOW64\rundll32.exe [2012-07-26 48640]
"OfficeSyncProcess"=C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE []
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"MSStp"=C:\Windows\system32\msstp.vbe []
"mnccfrpSrv"=C:\Windows\inf\mnccfrp.vbe [2014-01-19 1342]
"ToolBoxFX"=C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe [2010-01-27 53248]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
""= []
"HPUsageTracking"=C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [2007-08-31 36864]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [2012-09-23 3477640]
"mine"=C:\Users\Public\Documents\pooler-cpuminer-2.3.2-win64\nieco.vbs [2014-01-18 150]
"mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-06 20:03:07 ----A---- C:\Windows\system32\netcfg-80215390.txt
2014-03-06 20:03:05 ----A---- C:\Windows\system32\netcfg-80213250.txt
2014-03-06 20:02:56 ----A---- C:\Windows\system32\netcfg-80204359.txt
2014-03-06 20:02:53 ----A---- C:\Windows\system32\netcfg-80201593.txt
2014-03-06 20:02:45 ----A---- C:\Windows\system32\netcfg-80193234.txt
2014-03-06 20:02:43 ----A---- C:\Windows\system32\netcfg-80191078.txt
2014-03-06 20:02:23 ----A---- C:\Windows\system32\netcfg-80171546.txt
2014-03-06 20:02:11 ----A---- C:\Windows\system32\netcfg-80159468.txt
2014-03-05 21:48:55 ----D---- C:\rsit
2014-03-05 21:48:55 ----D---- C:\Program Files\trend micro
2014-03-05 14:51:24 ----A---- C:\Windows\system32\netcfg-87641859.txt
2014-03-05 14:51:21 ----A---- C:\Windows\system32\netcfg-87639546.txt
2014-03-02 21:58:57 ----A---- C:\Windows\system32\netcfg-31750.txt
2014-03-02 21:54:40 ----A---- C:\Windows\system32\netcfg-15038390.txt
2014-03-02 17:40:17 ----A---- C:\Windows\system32\netcfg-17828375.txt
2014-03-02 17:40:15 ----A---- C:\Windows\system32\netcfg-17826421.txt
2014-03-02 17:12:14 ----D---- C:\Users\Boss\AppData\Roaming\newnext.me
2014-03-02 17:09:49 ----D---- C:\Program Files (x86)\Mobogenie
2014-03-02 16:50:30 ----A---- C:\Windows\system32\netcfg-14842171.txt
2014-03-02 16:50:24 ----A---- C:\Windows\system32\netcfg-14835625.txt
2014-03-02 12:45:51 ----A---- C:\Windows\system32\netcfg-168343.txt
2014-03-01 15:07:56 ----A---- C:\Windows\system32\netcfg-112896281.txt
2014-03-01 12:40:42 ----D---- C:\Users\Boss\AppData\Roaming\uTorrent
2014-03-01 08:39:34 ----A---- C:\Windows\system32\netcfg-89594453.txt
2014-03-01 08:39:28 ----A---- C:\Windows\system32\netcfg-89588890.txt
2014-02-27 21:47:12 ----A---- C:\Windows\system32\netcfg-43215109.txt
2014-02-27 09:48:34 ----A---- C:\Windows\system32\netcfg-116781.txt
2014-02-26 22:17:36 ----A---- C:\Windows\system32\netcfg-28831109.txt
2014-02-26 22:05:55 ----A---- C:\Windows\system32\netcfg-28130531.txt
2014-02-26 22:05:50 ----A---- C:\Windows\system32\netcfg-28125328.txt
2014-02-26 14:18:01 ----A---- C:\Windows\system32\netcfg-56718.txt
2014-02-26 14:16:26 ----A---- C:\Windows\system32\netcfg-432261640.txt
2014-02-26 08:34:29 ----A---- C:\Windows\system32\netcfg-411745031.txt
2014-02-26 08:34:24 ----A---- C:\Windows\system32\netcfg-411739640.txt
2014-02-25 18:31:32 ----A---- C:\Windows\system32\netcfg-361171578.txt
2014-02-25 18:31:27 ----A---- C:\Windows\system32\netcfg-361166968.txt
2014-02-25 08:26:25 ----A---- C:\Windows\system32\netcfg-324865171.txt
2014-02-25 08:26:20 ----A---- C:\Windows\system32\netcfg-324859687.txt
2014-02-24 22:07:39 ----D---- C:\Users\Boss\AppData\Roaming\Identities
2014-02-24 15:20:00 ----A---- C:\Windows\system32\netcfg-263285000.txt
2014-02-24 15:19:55 ----A---- C:\Windows\system32\netcfg-263279296.txt
2014-02-23 08:34:04 ----A---- C:\Windows\system32\netcfg-152534109.txt
2014-02-23 08:33:59 ----A---- C:\Windows\system32\netcfg-152528453.txt
2014-02-22 18:34:12 ----A---- C:\Windows\system32\netcfg-102146640.txt
2014-02-22 18:34:07 ----A---- C:\Windows\system32\netcfg-102142031.txt
2014-02-22 08:51:42 ----A---- C:\Windows\system32\netcfg-67197015.txt
2014-02-22 08:51:41 ----A---- C:\Windows\system32\netcfg-67195359.txt
2014-02-21 14:12:47 ----A---- C:\Windows\system32\netcfg-65750.txt
2014-02-21 14:10:58 ----A---- C:\Windows\system32\netcfg-1432265.txt
2014-02-21 12:08:35 ----D---- C:\Windows\BrowserChoice
2014-02-21 10:13:39 ----A---- C:\Windows\system32\shell32.dll
2014-02-21 08:54:16 ----D---- C:\Program Files (x86)\Secunia
2014-02-21 08:30:22 ----D---- C:\Windows\system32\MRT
2014-02-19 21:48:07 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-02-19 21:47:43 ----D---- C:\Program Files (x86)\Windows Live
2014-02-19 21:46:34 ----D---- C:\ProgramData\Microsoft SkyDrive
2014-02-19 21:44:18 ----D---- C:\Users\Boss\AppData\Roaming\BSplayer Pro
2014-02-19 21:44:18 ----D---- C:\Users\Boss\AppData\Roaming\BSplayer
2014-02-19 21:44:14 ----D---- C:\Program Files (x86)\Webteh
2014-02-19 21:42:54 ----D---- C:\Users\Boss\AppData\Roaming\rmi
2014-02-19 20:35:21 ----A---- C:\Windows\system32\netcfg-192253328.txt
2014-02-19 20:35:17 ----A---- C:\Windows\system32\netcfg-192248531.txt
2014-02-19 14:05:34 ----A---- C:\Windows\system32\netcfg-168866484.txt
2014-02-19 14:05:29 ----A---- C:\Windows\system32\netcfg-168860796.txt
2014-02-18 14:11:31 ----A---- C:\Windows\system32\netcfg-82827843.txt
2014-02-18 14:11:25 ----A---- C:\Windows\system32\netcfg-82821250.txt
2014-02-18 06:17:49 ----A---- C:\Windows\system32\netcfg-54410500.txt
2014-02-18 06:17:45 ----A---- C:\Windows\system32\netcfg-54406031.txt
2014-02-17 15:11:56 ----A---- C:\Windows\system32\netcfg-57390.txt
2014-02-17 15:10:19 ----A---- C:\Windows\system32\netcfg-666174750.txt
2014-02-17 14:25:48 ----A---- C:\Windows\system32\netcfg-663503531.txt
2014-02-17 14:25:42 ----A---- C:\Windows\system32\netcfg-663497296.txt
2014-02-14 10:44:29 ----A---- C:\Windows\system32\netcfg-391047046.txt
2014-02-14 10:43:03 ----A---- C:\Windows\system32\netcfg-390961359.txt
2014-02-13 22:26:45 ----D---- C:\FFOutput
2014-02-13 22:25:44 ----D---- C:\Program Files (x86)\FreeTime
2014-02-13 22:12:30 ----N---- C:\Windows\system32\pwdspio.sys
2014-02-13 22:12:30 ----N---- C:\Windows\system32\pwdrvio.sys
2014-02-13 22:12:30 ----A---- C:\Windows\system32\pwNative.exe
2014-02-13 22:12:12 ----D---- C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.1.1
2014-02-13 14:02:41 ----A---- C:\Windows\system32\netcfg-316544750.txt
2014-02-13 14:02:35 ----A---- C:\Windows\system32\netcfg-316538640.txt
2014-02-12 16:09:07 ----A---- C:\Windows\system32\netcfg-237734281.txt
2014-02-12 16:09:07 ----A---- C:\Windows\system32\netcfg-237734125.txt
2014-02-12 07:32:24 ----A---- C:\Windows\system32\netcfg-206731640.txt
2014-02-12 07:32:18 ----A---- C:\Windows\system32\netcfg-206725078.txt
2014-02-11 22:33:31 ----D---- C:\Users\Boss\AppData\Roaming\SolidDocuments
2014-02-11 22:20:36 ----A---- C:\Windows\system32\netcfg-173628671.txt
2014-02-11 22:20:31 ----A---- C:\Windows\system32\netcfg-173623265.txt
2014-02-11 13:53:54 ----A---- C:\Windows\system32\netcfg-143231562.txt
2014-02-11 13:53:48 ----A---- C:\Windows\system32\netcfg-143225343.txt
2014-02-10 18:39:30 ----A---- C:\Windows\system32\netcfg-73972375.txt
2014-02-10 17:52:22 ----A---- C:\Windows\system32\netcfg-71144281.txt
2014-02-10 14:26:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-10 14:26:21 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-10 14:24:49 ----D---- C:\Program Files (x86)\XBMC
2014-02-10 09:50:26 ----D---- C:\Program Files\Microsoft Silverlight
2014-02-10 09:50:26 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-02-10 07:56:03 ----A---- C:\Windows\system32\netcfg-35366000.txt
2014-02-10 07:55:59 ----A---- C:\Windows\system32\netcfg-35361328.txt
2014-02-09 22:21:47 ----D---- C:\Program Files (x86)\Google
2014-02-09 22:10:44 ----D---- C:\Windows\AutoKMS
2014-02-09 22:08:26 ----A---- C:\Windows\system32\netcfg-112203.txt
2014-02-09 22:05:59 ----A---- C:\Windows\system32\netcfg-714906.txt
2014-02-09 21:55:45 ----A---- C:\Windows\system32\netcfg-101640.txt
2014-02-09 21:53:31 ----A---- C:\Windows\system32\netcfg-28797968.txt
2014-02-09 21:05:57 ----A---- C:\Windows\system32\netcfg-25944171.txt
2014-02-09 21:05:17 ----A---- C:\Windows\system32\netcfg-25903968.txt
2014-02-09 20:42:57 ----D---- C:\Users\Boss\AppData\Roaming\Macromedia
2014-02-09 20:32:01 ----A---- C:\Windows\system32\netcfg-23908437.txt
2014-02-09 20:24:13 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-02-09 20:18:55 ----A---- C:\Windows\system32\netcfg-23122562.txt
2014-02-09 18:17:47 ----D---- C:\Users\Boss\AppData\Roaming\HP
2014-02-09 18:17:12 ----D---- C:\ProgramData\HPSSUPPLY
2014-02-09 18:16:32 ----N---- C:\Windows\system32\hppfaxprintermonui5.dll
2014-02-09 18:16:32 ----N---- C:\Windows\system32\hppfaxprintermon5.dll
2014-02-09 18:16:31 ----ASH---- C:\Windows\system32\winzvprt5.sys
2014-02-09 18:16:31 ----A---- C:\Windows\system32\hppfaxprinter5.ini
2014-02-09 18:13:14 ----A---- C:\Windows\SYSWOW64\hpcdmc32.DLL
2014-02-09 18:13:14 ----A---- C:\Windows\SYSWOW64\hpcc3093.DLL
2014-02-09 18:13:14 ----A---- C:\Windows\system32\hpcpn093.dll
2014-02-09 18:13:13 ----A---- C:\Windows\SYSWOW64\fxcompchannel.dll
2014-02-09 18:12:50 ----D---- C:\Program Files (x86)\HP
2014-02-09 18:12:48 ----HD---- C:\Config.Msi
2014-02-09 18:11:49 ----N---- C:\Windows\hppmdl07.dat
2014-02-09 18:11:49 ----A---- C:\Windows\system32\hppins07.dat
2014-02-09 18:11:49 ----A---- C:\Windows\hppins07.dat
2014-02-09 18:10:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-02-09 18:09:51 ----D---- C:\Windows\SYSWOW64\XPSViewer
2014-02-09 18:09:47 ----D---- C:\Program Files\Reference Assemblies
2014-02-09 18:09:47 ----D---- C:\Program Files\MSBuild
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2014-02-09 18:08:00 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-09 18:07:53 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-02-09 18:07:53 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2014-02-09 18:07:53 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64gen.sys
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64fax.sys
2014-02-09 18:05:12 ----A---- C:\Windows\system32\drivers\hpfx64bulk.sys
2014-02-09 18:04:42 ----A---- C:\Windows\system32\hpxp2727_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\SYSWOW64\hpptsp02.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hpptsp02_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppdpr07_x64.dll
2014-02-09 18:04:41 ----A---- C:\Windows\system32\hppdew07_x64.dll

VIRY.CZ

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu