Zpomalený net, vkládám log RSIT dle návodu (na 2 části)
Napsal: 16 črc 2013 11:09
Logfile of random's system information tool 1.09 (written by random/random)
Run by Keksa at 2013-07-16 11:53:30
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 131 GB (28%) free of 462 GB
Total RAM: 3958 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:42, on 16.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\TrojanHunter 5.3\THGuard.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe
C:\program files (x86)\iomega storage manager\iomegastoragemanager.exe
C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe
C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe
C:\program files\trend micro safesync\hrfsclient.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Keksa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=122139 ... FF734BCEB9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 172.16.3.100 servermfg.tes
O1 - Hosts: 172.16.2.243 tse5n
O1 - Hosts: 172.16.2.233 tse5n
O1 - Hosts: 213.29.33.38
O1 - Hosts: 172.30.1.10 qadsrv.radka.cz
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: Lync add-on BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [Communicator] "C:\Program Files (x86)\Microsoft Lync\communicator.exe" /fromrunkey
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [emsisoft anti-malware] "C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe" /d=60
O4 - HKCU\..\Run: [myweather] "C:\Program Files (x86)\MyFreeWeather\myweather.exe" /autorun
O4 - HKCU\..\Run: [MWSnap] "C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
O4 - Global Startup: Twonky Tray Control.lnk = C:\Program Files (x86)\TwonkyMedia\twonkymediaserverconfig.exe
O4 - Global Startup: vpngui.exe.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Doplněk aplikace Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O9 - Extra 'Tools' menuitem: Doplněk aplikace Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://qadskol.minerva-is.cz
O15 - Trusted Zone: http://ta-dotnet.minerva-is.cz
O15 - Trusted Zone: www.citrix.qad.com
O15 - Trusted Zone: http://*.qaddemo
O15 - Trusted IP range: http://192.168.42.65
O16 - DPF: 55963676-2F5E-4BAF-AC28-CF26AA587566 - vpnweb.cab
O16 - DPF: {380BBEC2-4CAE-4ECE-8AFF-36CDE7916386} (Surgient URA Local Proxy Client (v2)) - http://success6.qad.com/URA/URA/lib/srdp.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.6.0.cab
O16 - DPF: {997C5A94-77F6-427D-A388-AC2B6ECF0F7C} - http://ta-dotnet.minerva-is.cz:60001/qa ... /setup.ocx
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\261249~1.132\{c16c1~1\browse~1.dll
O23 - Service: Emsisoft Anti-Malware 8.0 - Service (a2AntiMalware) - Emsisoft GmbH - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\AESTSr64.exe
O23 - Service: Aladdin SQL Server - Unknown owner - C:\Program Files (x86)\Aladdin\Aladdin SQL Server\AladdinSQL.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: BrowserProtect - Unknown owner - C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dell ControlPoint Button Service (buttonsvc64) - Dell Inc. - c:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
O23 - Service: Credential Vault Host Control Service - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
O23 - Service: Credential Vault Host Storage - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Správce systému Dell ControlPoint System Manager (dcpsysmgrsvc) - Dell Inc. - c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FortiClient Connect SSLVPN (FortiSslvpnDaemon) - Fortinet Inc. - C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: ShrewSoft IKE Daemon (iked) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\iked.exe
O23 - Service: FF Install Filter Service (InstallFilterService) - Unknown owner - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\InstallFilterService.exe
O23 - Service: ShrewSoft IPSEC Daemon (ipsecd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Kerio Updater Service (ktupdaterservice) - Kerio Technologies Inc. - C:\Program Files (x86)\Kerio\UpdaterService\ktupdaterservice.exe
O23 - Service: Kerio VPN Client Service (KVPNCSvc) - Kerio Technologies Inc. - C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: OnlineStorageService - Trend Micro Inc. - C:\Program Files\Trend Micro SafeSync\hrfscore.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PCloudd - Iomega Corp - C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QPCopyEngine - Unknown owner - C:\Program Files\Iomega\Quikprotect\QpMonitor.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - C:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - Soluto - C:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C:\Program Files\Soluto\SolutoService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: NTRU TSS v1.2.1.29 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 25170 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=07c00a5d-e34b-4b79-8c5b-8d0bf8bd074e /coreSdkOptions=286 /logConfFile="C:\ProgramData\AVG2012\temp\c50d5f1b-1281-4a64-adbb-3b27dbd7281d-1b8-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\STacSV64.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 30497936
\??\C:\Windows\system32\conhost.exe "-17869466671936164603-1535737745-15119801085001587-71076951344197194486515731
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe"
"C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\AESTSr64.exe
"C:\Program Files (x86)\Aladdin\Aladdin SQL Server\AladdinSQL.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
"C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe"
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\ShrewSoft\VPN Client\iked.exe" -service
"C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\InstallFilterService.exe"
"C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe" -service
C:\Windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files\Soluto\SolutoLauncherService.exe"
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\nvHotkey.dll,Start
"C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "-164322373-1743159754-173684824211977873219939475932837026882090144638-1975633559
"C:\Program Files\DellTPad\HidFind.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\TrojanHunter 5.3\THGuard.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe"
C:\Windows\SysWOW64\vmnat.exe
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=b002eb4d-bf6d-4e15-8c1c-325008a1913a /coreSdkOptions=18 /logConfFile="C:\ProgramData\AVG2012\temp\7780e274-b890-443c-902c-d32f0a31d92c-12d4-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSMLBIZ
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4749d3fc-7ebb-44cf-8fe9-b78b83e1e9fa -SystemEventPortName:HostProcess-131bf53a-9d5e-4577-ad41-848e4efab90a -IoCancelEventPortName:HostProcess-c1cf8b13-e3a9-4935-891f-6d63b70f659f -NonStateChangingEventPortName:HostProcess-b9a7f870-5b33-41dc-bcb3-3b624947c5cd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2e4a4a8a-2cca-413a-a5bb-f2771153563d -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-27f273b4-93bb-47a1-a074-e2f317ef91ad -SystemEventPortName:HostProcess-5cba9f06-5661-489f-93d6-451aedf4cbc5 -IoCancelEventPortName:HostProcess-10a79df0-e20f-4f5f-a316-1ba9b7e65f07 -NonStateChangingEventPortName:HostProcess-9747b0f3-7284-44aa-a12b-186879ad6fc2 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6fab1719-f98f-48d7-87db-3f5fc1258295 -DeviceGroupId:WpdFsGroup
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe" /tray
"C:\Windows\System32\StikyNot.exe"
"C:\program files\dell\dell controlpoint\system manager\dcpsysmgr.exe"
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\program files (x86)\iomega storage manager\iomegastoragemanager.exe" -s
"C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe"
"C:\Program Files\Iomega\Quikprotect\QpMonitor.exe"
"C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe"
"C:/Users/Keksa/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Iomega\Quikprotect\QuikProtect.exe"
"C:\program files\trend micro safesync\hrfsclient.exe"
"C:\Program Files\Trend Micro SafeSync\hrfscore.exe"
"c:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe"
"c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Kerio\UpdaterService\ktupdaterservice.exe"
"C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 7720
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\SysWOW64\svchost.exe -k Akamai
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"
"C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe"
"C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.EXE"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Keksa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook\O22BGV0O\CQ013501a1.doc"
C:\Windows\splwow64.exe 12288
"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde
explorer.exe
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Windows Sidebar\sidebar.exe"
taskeng.exe {A4D24B6D-52CD-4BDA-9F23-B046DEBFD4A6}
{1383251E-8CAC-4387-B629-5481529F7CC6}
{01EB2B6B-87EC-447D-AA7E-C0902C078DFF}
taskeng.exe {C5266B8C-424A-47DA-8941-C078BC7B809B}
"C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe"
"taskhost.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Windows\system32\systempropertiesadvanced.exe"
"C:\Program Files\CCleaner\CCleaner64.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe191_ Global\UsGthrCtrlFltPipeMssGthrPipe191 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Keksa\Downloads\RSITx64.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2250697331-882461815-2363149359-1003Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2250697331-882461815-2363149359-1003UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default
prefs.js - "browser.startup.homepage" - "http://ihned.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178, bkmrksync@nokia.com:1.0.0.732, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@FortinetCacheClean]
"Description"=SSL VPN Cache Cleaner
"Path"=C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@FortinetTunnelControl]
"Description"=SSL VPN Tunnel Control Plugin
"Path"=C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
C:\Program Files (x86)\Mozilla Firefox\extensions\
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
IICAClient.xpt
nsIQTScriptablePlugin.xpt
C:\Program Files (x86)\Mozilla Firefox\plugins\
CCMSDK.dll
cgpcfg.dll
CgpCore.dll
confmgr.dll
ctxlogging.dll
ctxmui.dll
ICAClObj.class
icafile.dll
icalogon.dll
np-mswmp.dll
npicaN.dll
npMeetingJoinPluginOC.dll
nppdf32.DEU
nppdf32.dll
nppdf32.FRA
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class
sslsdk_b.dll
TcpPServ.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
yahoo.xml
C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default\extensions\
toolbar@ask.com
{800b5000-a755-47e1-992b-48a1c1357f07}
C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default\searchplugins\
askcom.xml
babylon.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2012-10-15 1968248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-01 43520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll [2010-11-03 211720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-06-02 1018616]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2010-05-13 391024]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-04-17 16414824]
"NVHotkey"=C:\Windows\system32\nvHotkey.dll [2010-04-17 95336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"myweather"=C:\Program Files (x86)\MyFreeWeather\myweather.exe /autorun []
"MWSnap"=C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe [2002-07-06 427008]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-04-19 18678376]
""= []
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-04-19 1090912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
""= []
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"Communicator"=C:\Program Files (x86)\Microsoft Lync\communicator.exe [2013-05-30 12107944]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2010-10-12 304568]
"NSU_agent"=C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2013-04-25 1648264]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2013-05-10 840768]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2013-05-10 38984]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"emsisoft anti-malware"=C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe [2013-07-02 2928040]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
Twonky Tray Control.lnk - C:\Program Files (x86)\TwonkyMedia\twonkymediaserverconfig.exe
vpngui.exe.lnk - C:\Windows\Installer\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}\Icon09DB8A851.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
wvauth
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-16 11:53:31 ----D---- C:\Program Files\trend micro
2013-07-16 11:53:30 ----D---- C:\rsit
2013-07-16 11:36:53 ----D---- C:\Program Files\CCleaner
2013-07-16 08:34:33 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-07-16 08:34:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-07-16 08:34:33 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-07-16 08:34:33 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-07-16 08:34:32 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-07-16 08:34:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-07-16 08:34:32 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-07-16 08:34:32 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-07-16 08:34:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-07-16 08:34:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-07-16 08:34:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-07-16 08:34:27 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-07-16 08:34:26 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-07-16 08:34:26 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-07-16 08:34:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-07-16 08:34:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-07-16 08:34:25 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-07-16 08:34:24 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-07-16 08:34:24 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-07-16 08:34:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-07-16 08:34:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-07-16 08:34:21 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-07-16 08:34:21 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-07-16 08:34:19 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-07-16 08:34:19 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-07-16 08:34:18 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-07-16 08:34:18 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-07-16 08:34:17 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-07-16 08:34:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-07-16 08:34:16 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-07-16 08:34:12 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-07-16 08:34:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-07-16 08:34:12 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-07-16 08:34:12 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-07-16 08:34:10 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-07-16 08:34:10 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-07-16 08:34:08 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-07-16 08:34:08 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-07-16 08:34:08 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-07-16 08:34:08 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-07-16 08:34:07 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-07-16 08:34:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-07-16 08:34:07 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-07-16 08:34:07 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-07-16 08:34:06 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-07-16 08:34:05 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-07-16 08:34:05 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-07-16 08:34:04 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-07-16 08:34:04 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-07-16 08:34:03 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-07-16 08:34:03 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-07-16 08:34:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-07-16 08:34:02 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-07-16 08:34:01 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-07-16 08:33:59 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-07-16 08:33:59 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-07-16 08:33:59 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-07-16 08:33:59 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-07-16 08:33:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-07-16 08:33:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-07-16 08:33:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-07-16 08:33:57 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-07-16 08:33:56 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-07-16 08:33:56 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-07-16 08:33:55 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-07-16 08:33:55 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-07-16 08:33:54 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-07-16 08:33:53 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-07-16 08:33:53 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-07-16 08:33:52 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-07-16 08:33:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-07-16 08:33:52 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-07-16 08:33:52 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-07-16 08:33:51 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-07-16 08:33:50 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-07-16 08:33:50 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-07-16 08:33:49 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-07-16 08:33:49 ----A---- C:\Windows\system32\xinput1_3.dll
2013-07-16 08:33:48 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-07-16 08:33:48 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-07-16 08:33:47 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-07-16 08:33:46 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-07-16 08:33:46 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-07-16 08:33:45 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-07-16 08:33:45 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-07-16 08:33:43 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-07-16 08:33:43 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-07-16 08:33:43 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-07-16 08:33:43 ----A---- C:\Windows\system32\d3dx10.dll
2013-07-16 08:33:40 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-07-16 08:33:40 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-07-16 08:33:40 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-07-16 08:33:40 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-07-16 08:33:39 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-07-16 08:33:39 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-07-16 08:33:38 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-07-16 08:33:38 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-07-16 08:33:38 ----A---- C:\Windows\system32\xinput1_2.dll
2013-07-16 08:33:38 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-07-16 08:33:37 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-07-16 08:33:37 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-07-16 08:33:35 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-07-16 08:33:35 ----A---- C:\Windows\system32\xinput1_1.dll
2013-07-16 08:33:34 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-07-16 08:33:34 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-07-16 08:33:18 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-07-16 08:33:18 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-07-16 08:33:15 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-07-16 08:33:13 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-07-16 08:33:13 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-07-16 08:33:12 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-07-16 08:33:12 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-07-16 08:33:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-07-16 08:33:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-07-16 08:33:09 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-07-16 08:33:09 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-07-16 08:33:08 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-07-16 08:33:08 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-07-16 08:33:07 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-07-16 08:33:07 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-07-16 03:00:44 ----D---- C:\Windows\system32\MRT
2013-07-15 23:00:28 ----D---- C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-15 00:17:18 ----D---- C:\Users\Keksa\AppData\Roaming\TrojanHunter
2013-07-14 22:12:00 ----R---- C:\Windows\SYSWOW64\streamhlp.dll
2013-07-14 22:12:00 ----D---- C:\Program Files (x86)\TrojanHunter 5.3
2013-07-13 03:07:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-07-13 03:07:42 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-07-13 03:07:42 ----A---- C:\Windows\system32\ieui.dll
2013-07-13 03:07:42 ----A---- C:\Windows\system32\iesetup.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iesysprep.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iertutil.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iernonce.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\ie4uinit.exe
2013-07-13 03:07:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-07-13 03:07:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-07-13 03:07:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-07-13 03:07:40 ----A---- C:\Windows\system32\jscript.dll
2013-07-13 03:07:39 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-07-13 03:07:39 ----A---- C:\Windows\system32\jscript9.dll
2013-07-13 03:07:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-07-13 03:07:38 ----A---- C:\Windows\system32\urlmon.dll
2013-07-13 03:07:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-07-13 03:07:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-07-13 03:07:37 ----A---- C:\Windows\system32\jsproxy.dll
2013-07-13 03:07:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-07-13 03:07:36 ----A---- C:\Windows\system32\wininet.dll
2013-07-13 03:07:35 ----A---- C:\Windows\system32\ieframe.dll
2013-07-13 03:07:34 ----A---- C:\Windows\system32\mshtml.dll
2013-07-13 03:07:32 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-07-11 09:32:04 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-07-11 09:32:04 ----A---- C:\Windows\system32\qedit.dll
2013-07-11 09:32:03 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-07-11 09:32:03 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:31:51 ----A---- C:\Windows\system32\win32k.sys
2013-07-11 09:31:30 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-07-11 09:31:30 ----A---- C:\Windows\system32\DWrite.dll
2013-07-03 23:16:25 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-07-01 08:34:36 ----D---- C:\ProgramData\Apple Computer
2013-07-01 08:34:36 ----D---- C:\Program Files (x86)\QuickTime
2013-06-20 21:13:55 ----D---- C:\Users\Keksa\AppData\Roaming\Malwarebytes
2013-06-20 21:13:50 ----D---- C:\ProgramData\Malwarebytes
2013-06-18 20:59:55 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys
Run by Keksa at 2013-07-16 11:53:30
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 131 GB (28%) free of 462 GB
Total RAM: 3958 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:42, on 16.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\TrojanHunter 5.3\THGuard.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe
C:\program files (x86)\iomega storage manager\iomegastoragemanager.exe
C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe
C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe
C:\program files\trend micro safesync\hrfsclient.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Keksa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=122139 ... FF734BCEB9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 172.16.3.100 servermfg.tes
O1 - Hosts: 172.16.2.243 tse5n
O1 - Hosts: 172.16.2.233 tse5n
O1 - Hosts: 213.29.33.38
O1 - Hosts: 172.30.1.10 qadsrv.radka.cz
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: Lync add-on BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [Communicator] "C:\Program Files (x86)\Microsoft Lync\communicator.exe" /fromrunkey
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [emsisoft anti-malware] "C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe" /d=60
O4 - HKCU\..\Run: [myweather] "C:\Program Files (x86)\MyFreeWeather\myweather.exe" /autorun
O4 - HKCU\..\Run: [MWSnap] "C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
O4 - Global Startup: Twonky Tray Control.lnk = C:\Program Files (x86)\TwonkyMedia\twonkymediaserverconfig.exe
O4 - Global Startup: vpngui.exe.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Doplněk aplikace Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O9 - Extra 'Tools' menuitem: Doplněk aplikace Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://qadskol.minerva-is.cz
O15 - Trusted Zone: http://ta-dotnet.minerva-is.cz
O15 - Trusted Zone: www.citrix.qad.com
O15 - Trusted Zone: http://*.qaddemo
O15 - Trusted IP range: http://192.168.42.65
O16 - DPF: 55963676-2F5E-4BAF-AC28-CF26AA587566 - vpnweb.cab
O16 - DPF: {380BBEC2-4CAE-4ECE-8AFF-36CDE7916386} (Surgient URA Local Proxy Client (v2)) - http://success6.qad.com/URA/URA/lib/srdp.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.6.0.cab
O16 - DPF: {997C5A94-77F6-427D-A388-AC2B6ECF0F7C} - http://ta-dotnet.minerva-is.cz:60001/qa ... /setup.ocx
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = niobhluk.local,vyvojfirma.mt
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\261249~1.132\{c16c1~1\browse~1.dll
O23 - Service: Emsisoft Anti-Malware 8.0 - Service (a2AntiMalware) - Emsisoft GmbH - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\AESTSr64.exe
O23 - Service: Aladdin SQL Server - Unknown owner - C:\Program Files (x86)\Aladdin\Aladdin SQL Server\AladdinSQL.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: BrowserProtect - Unknown owner - C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dell ControlPoint Button Service (buttonsvc64) - Dell Inc. - c:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
O23 - Service: Credential Vault Host Control Service - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
O23 - Service: Credential Vault Host Storage - Broadcom Corporation - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Správce systému Dell ControlPoint System Manager (dcpsysmgrsvc) - Dell Inc. - c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FortiClient Connect SSLVPN (FortiSslvpnDaemon) - Fortinet Inc. - C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: ShrewSoft IKE Daemon (iked) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\iked.exe
O23 - Service: FF Install Filter Service (InstallFilterService) - Unknown owner - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\InstallFilterService.exe
O23 - Service: ShrewSoft IPSEC Daemon (ipsecd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Kerio Updater Service (ktupdaterservice) - Kerio Technologies Inc. - C:\Program Files (x86)\Kerio\UpdaterService\ktupdaterservice.exe
O23 - Service: Kerio VPN Client Service (KVPNCSvc) - Kerio Technologies Inc. - C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: OnlineStorageService - Trend Micro Inc. - C:\Program Files\Trend Micro SafeSync\hrfscore.exe
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PCloudd - Iomega Corp - C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QPCopyEngine - Unknown owner - C:\Program Files\Iomega\Quikprotect\QpMonitor.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - C:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - Soluto - C:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C:\Program Files\Soluto\SolutoService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: NTRU TSS v1.2.1.29 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 25170 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=07c00a5d-e34b-4b79-8c5b-8d0bf8bd074e /coreSdkOptions=286 /logConfFile="C:\ProgramData\AVG2012\temp\c50d5f1b-1281-4a64-adbb-3b27dbd7281d-1b8-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\STacSV64.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 30497936
\??\C:\Windows\system32\conhost.exe "-17869466671936164603-1535737745-15119801085001587-71076951344197194486515731
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe"
"C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_e085d3cd5b474ba6\AESTSr64.exe
"C:\Program Files (x86)\Aladdin\Aladdin SQL Server\AladdinSQL.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
"C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe"
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\ShrewSoft\VPN Client\iked.exe" -service
"C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\InstallFilterService.exe"
"C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe" -service
C:\Windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files\Soluto\SolutoLauncherService.exe"
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\nvHotkey.dll,Start
"C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "-164322373-1743159754-173684824211977873219939475932837026882090144638-1975633559
"C:\Program Files\DellTPad\HidFind.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
"C:\Program Files (x86)\TrojanHunter 5.3\THGuard.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe"
C:\Windows\SysWOW64\vmnat.exe
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=b002eb4d-bf6d-4e15-8c1c-325008a1913a /coreSdkOptions=18 /logConfFile="C:\ProgramData\AVG2012\temp\7780e274-b890-443c-902c-d32f0a31d92c-12d4-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSMLBIZ
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4749d3fc-7ebb-44cf-8fe9-b78b83e1e9fa -SystemEventPortName:HostProcess-131bf53a-9d5e-4577-ad41-848e4efab90a -IoCancelEventPortName:HostProcess-c1cf8b13-e3a9-4935-891f-6d63b70f659f -NonStateChangingEventPortName:HostProcess-b9a7f870-5b33-41dc-bcb3-3b624947c5cd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2e4a4a8a-2cca-413a-a5bb-f2771153563d -DeviceGroupId:
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-27f273b4-93bb-47a1-a074-e2f317ef91ad -SystemEventPortName:HostProcess-5cba9f06-5661-489f-93d6-451aedf4cbc5 -IoCancelEventPortName:HostProcess-10a79df0-e20f-4f5f-a316-1ba9b7e65f07 -NonStateChangingEventPortName:HostProcess-9747b0f3-7284-44aa-a12b-186879ad6fc2 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6fab1719-f98f-48d7-87db-3f5fc1258295 -DeviceGroupId:WpdFsGroup
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe" /tray
"C:\Windows\System32\StikyNot.exe"
"C:\program files\dell\dell controlpoint\system manager\dcpsysmgr.exe"
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\program files (x86)\iomega storage manager\iomegastoragemanager.exe" -s
"C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe"
"C:\Program Files\Iomega\Quikprotect\QpMonitor.exe"
"C:\Users\Keksa\AppData\Local\Akamai\netsession_win.exe"
"C:/Users/Keksa/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Iomega\Quikprotect\QuikProtect.exe"
"C:\program files\trend micro safesync\hrfsclient.exe"
"C:\Program Files\Trend Micro SafeSync\hrfscore.exe"
"c:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe"
"c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Kerio\UpdaterService\ktupdaterservice.exe"
"C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 7720
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\SysWOW64\svchost.exe -k Akamai
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"
"C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe"
"C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.EXE"
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Keksa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook\O22BGV0O\CQ013501a1.doc"
C:\Windows\splwow64.exe 12288
"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde
explorer.exe
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Windows Sidebar\sidebar.exe"
taskeng.exe {A4D24B6D-52CD-4BDA-9F23-B046DEBFD4A6}
{1383251E-8CAC-4387-B629-5481529F7CC6}
{01EB2B6B-87EC-447D-AA7E-C0902C078DFF}
taskeng.exe {C5266B8C-424A-47DA-8941-C078BC7B809B}
"C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe"
"taskhost.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Windows\system32\systempropertiesadvanced.exe"
"C:\Program Files\CCleaner\CCleaner64.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe191_ Global\UsGthrCtrlFltPipeMssGthrPipe191 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Keksa\Downloads\RSITx64.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2250697331-882461815-2363149359-1003Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2250697331-882461815-2363149359-1003UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default
prefs.js - "browser.startup.homepage" - "http://ihned.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178, bkmrksync@nokia.com:1.0.0.732, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@FortinetCacheClean]
"Description"=SSL VPN Cache Cleaner
"Path"=C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@FortinetTunnelControl]
"Description"=SSL VPN Tunnel Control Plugin
"Path"=C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
C:\Program Files (x86)\Mozilla Firefox\extensions\
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
IICAClient.xpt
nsIQTScriptablePlugin.xpt
C:\Program Files (x86)\Mozilla Firefox\plugins\
CCMSDK.dll
cgpcfg.dll
CgpCore.dll
confmgr.dll
ctxlogging.dll
ctxmui.dll
ICAClObj.class
icafile.dll
icalogon.dll
np-mswmp.dll
npicaN.dll
npMeetingJoinPluginOC.dll
nppdf32.DEU
nppdf32.dll
nppdf32.FRA
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class
sslsdk_b.dll
TcpPServ.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
yahoo.xml
C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default\extensions\
toolbar@ask.com
{800b5000-a755-47e1-992b-48a1c1357f07}
C:\Users\Keksa\AppData\Roaming\Mozilla\Firefox\Profiles\hs658jfx.default\searchplugins\
askcom.xml
babylon.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2012-10-15 1968248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-01 43520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Lync\OCHelper.dll [2010-11-03 211720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-06-02 1018616]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-10 343632]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-04-25 1520776]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2010-05-13 391024]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-04-17 16414824]
"NVHotkey"=C:\Windows\system32\nvHotkey.dll [2010-04-17 95336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"myweather"=C:\Program Files (x86)\MyFreeWeather\myweather.exe /autorun []
"MWSnap"=C:\Users\Keksa\Downloads\MWSnap300\MWSnap.exe [2002-07-06 427008]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-04-19 18678376]
""= []
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-04-19 1090912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
""= []
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"Communicator"=C:\Program Files (x86)\Microsoft Lync\communicator.exe [2013-05-30 12107944]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2010-10-12 304568]
"NSU_agent"=C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2013-04-25 1648264]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2013-05-10 840768]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2013-05-10 38984]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"emsisoft anti-malware"=C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe [2013-07-02 2928040]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
Twonky Tray Control.lnk - C:\Program Files (x86)\TwonkyMedia\twonkymediaserverconfig.exe
vpngui.exe.lnk - C:\Windows\Installer\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}\Icon09DB8A851.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
wvauth
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-16 11:53:31 ----D---- C:\Program Files\trend micro
2013-07-16 11:53:30 ----D---- C:\rsit
2013-07-16 11:36:53 ----D---- C:\Program Files\CCleaner
2013-07-16 08:34:33 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-07-16 08:34:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-07-16 08:34:33 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-07-16 08:34:33 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-07-16 08:34:32 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-07-16 08:34:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-07-16 08:34:32 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-07-16 08:34:32 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-07-16 08:34:31 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-07-16 08:34:30 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-07-16 08:34:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-07-16 08:34:28 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-07-16 08:34:28 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-07-16 08:34:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-07-16 08:34:27 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-07-16 08:34:26 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-07-16 08:34:26 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-07-16 08:34:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-07-16 08:34:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-07-16 08:34:25 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-07-16 08:34:24 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-07-16 08:34:24 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-07-16 08:34:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-07-16 08:34:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-07-16 08:34:21 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-07-16 08:34:21 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-07-16 08:34:19 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-07-16 08:34:19 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-07-16 08:34:18 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-07-16 08:34:18 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-07-16 08:34:17 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-07-16 08:34:17 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-07-16 08:34:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-07-16 08:34:16 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-07-16 08:34:15 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-07-16 08:34:13 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-07-16 08:34:12 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-07-16 08:34:12 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-07-16 08:34:12 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-07-16 08:34:12 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-07-16 08:34:11 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-07-16 08:34:10 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-07-16 08:34:10 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-07-16 08:34:08 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-07-16 08:34:08 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-07-16 08:34:08 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-07-16 08:34:08 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-07-16 08:34:07 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-07-16 08:34:07 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-07-16 08:34:07 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-07-16 08:34:07 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-07-16 08:34:06 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-07-16 08:34:06 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-07-16 08:34:05 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-07-16 08:34:05 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-07-16 08:34:04 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-07-16 08:34:04 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-07-16 08:34:03 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-07-16 08:34:03 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-07-16 08:34:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-07-16 08:34:02 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-07-16 08:34:01 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-07-16 08:34:01 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-07-16 08:33:59 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-07-16 08:33:59 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-07-16 08:33:59 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-07-16 08:33:59 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-07-16 08:33:58 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-07-16 08:33:58 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-07-16 08:33:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-07-16 08:33:57 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-07-16 08:33:56 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-07-16 08:33:56 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-07-16 08:33:55 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-07-16 08:33:55 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-07-16 08:33:54 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-07-16 08:33:54 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-07-16 08:33:53 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-07-16 08:33:53 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-07-16 08:33:52 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-07-16 08:33:52 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-07-16 08:33:52 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-07-16 08:33:52 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-07-16 08:33:51 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-07-16 08:33:51 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-07-16 08:33:50 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-07-16 08:33:50 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-07-16 08:33:49 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-07-16 08:33:49 ----A---- C:\Windows\system32\xinput1_3.dll
2013-07-16 08:33:48 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-07-16 08:33:48 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-07-16 08:33:47 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-07-16 08:33:47 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-07-16 08:33:46 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-07-16 08:33:46 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-07-16 08:33:45 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-07-16 08:33:45 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-07-16 08:33:43 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-07-16 08:33:43 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-07-16 08:33:43 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-07-16 08:33:43 ----A---- C:\Windows\system32\d3dx10.dll
2013-07-16 08:33:40 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-07-16 08:33:40 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-07-16 08:33:40 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-07-16 08:33:40 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-07-16 08:33:39 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-07-16 08:33:39 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-07-16 08:33:38 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-07-16 08:33:38 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-07-16 08:33:38 ----A---- C:\Windows\system32\xinput1_2.dll
2013-07-16 08:33:38 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-07-16 08:33:37 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-07-16 08:33:37 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-07-16 08:33:35 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-07-16 08:33:35 ----A---- C:\Windows\system32\xinput1_1.dll
2013-07-16 08:33:34 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-07-16 08:33:34 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-07-16 08:33:18 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-07-16 08:33:18 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-07-16 08:33:15 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-07-16 08:33:15 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-07-16 08:33:13 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-07-16 08:33:13 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-07-16 08:33:12 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-07-16 08:33:12 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-07-16 08:33:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-07-16 08:33:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-07-16 08:33:09 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-07-16 08:33:09 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-07-16 08:33:08 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-07-16 08:33:08 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-07-16 08:33:07 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-07-16 08:33:07 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-07-16 03:00:44 ----D---- C:\Windows\system32\MRT
2013-07-15 23:00:28 ----D---- C:\Program Files (x86)\Emsisoft Anti-Malware
2013-07-15 00:17:18 ----D---- C:\Users\Keksa\AppData\Roaming\TrojanHunter
2013-07-14 22:12:00 ----R---- C:\Windows\SYSWOW64\streamhlp.dll
2013-07-14 22:12:00 ----D---- C:\Program Files (x86)\TrojanHunter 5.3
2013-07-13 03:07:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-07-13 03:07:42 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-07-13 03:07:42 ----A---- C:\Windows\system32\ieui.dll
2013-07-13 03:07:42 ----A---- C:\Windows\system32\iesetup.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-07-13 03:07:41 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iesysprep.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iertutil.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\iernonce.dll
2013-07-13 03:07:41 ----A---- C:\Windows\system32\ie4uinit.exe
2013-07-13 03:07:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-07-13 03:07:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-07-13 03:07:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-07-13 03:07:40 ----A---- C:\Windows\system32\jscript.dll
2013-07-13 03:07:39 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-07-13 03:07:39 ----A---- C:\Windows\system32\jscript9.dll
2013-07-13 03:07:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-07-13 03:07:38 ----A---- C:\Windows\system32\urlmon.dll
2013-07-13 03:07:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-07-13 03:07:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-07-13 03:07:37 ----A---- C:\Windows\system32\jsproxy.dll
2013-07-13 03:07:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-07-13 03:07:36 ----A---- C:\Windows\system32\wininet.dll
2013-07-13 03:07:35 ----A---- C:\Windows\system32\ieframe.dll
2013-07-13 03:07:34 ----A---- C:\Windows\system32\mshtml.dll
2013-07-13 03:07:32 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-07-11 09:32:04 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-07-11 09:32:04 ----A---- C:\Windows\system32\qedit.dll
2013-07-11 09:32:03 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-07-11 09:32:03 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:31:51 ----A---- C:\Windows\system32\win32k.sys
2013-07-11 09:31:30 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-07-11 09:31:30 ----A---- C:\Windows\system32\DWrite.dll
2013-07-03 23:16:25 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-07-01 08:34:36 ----D---- C:\ProgramData\Apple Computer
2013-07-01 08:34:36 ----D---- C:\Program Files (x86)\QuickTime
2013-06-20 21:13:55 ----D---- C:\Users\Keksa\AppData\Roaming\Malwarebytes
2013-06-20 21:13:50 ----D---- C:\ProgramData\Malwarebytes
2013-06-18 20:59:55 ----A---- C:\Windows\system32\drivers\pccsmcfdx64.sys