VIRY.CZ

Dobrý den ,prosím o kontrolu:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Pavel at 2013-09-12 17:13:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 219 GB (46%) free of 477 GB
Total RAM: 4095 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:13:28, on 12.9.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16686)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SpeedFan\speedfan.exe
C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
H:\Steam\steam.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9010
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [MusicManager] "C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apache2.2 - Unknown owner - (no file)
O23 - Service: Apache2.4 - Apache Software Foundation - C:\Users\Pavel\Downloads\xampp-win32-1.8.1-vc9\xampp\apache\bin\httpd.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30007 (IISADMIN) - Unknown owner - C:\Windows\system32\inetsrv\inetinfo.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Unknown owner - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PandoraService (PanService) - Unknown owner - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Unknown owner - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Unknown owner - C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VNC Server (vncserver) - RealVNC Ltd - C:\Program Files\RealVNC\VNC Server\vncserver.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Web Update Wizard Service V4 (WebUpdate4) - Unknown owner - C:\Windows\SysWOW64\WebUpdateSvc4.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-20001 (WMSVC) - Unknown owner - C:\Windows\system32\inetsrv\wmsvc.exe (file missing)

--
End of file - 9311 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {4965BDA0-390D-446E-BDEB-17952F54295D}
"C:\Program Files (x86)\SpeedFan\speedfan.exe"
C:\Windows\system32\svchost.exe -k ftpsvc
C:\Windows\system32\inetsrv\inetinfo.exe
C:\Windows\System32\svchost.exe -k ipripsvc
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k iissvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1508
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-25015010-4f59-42fa-853c-65fd8de77629 -SystemEventPortName:HostProcess-a363a7ce-a245-4fa0-aa51-d0bc128bb1e6 -IoCancelEventPortName:HostProcess-3f288c25-e9ad-484c-a820-f3ee91ac7ccc -NonStateChangingEventPortName:HostProcess-3c3e88e5-7bc1-4485-9f9f-0bd74a205a7c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3007195c-7c5f-4056-b5ec-67beb0c6aaf0 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"H:\Steam\steam.exe" "steam://rungameid/55230"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Pavel\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3189887573-1657581480-599442750-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3189887573-1657581480-599442750-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-06 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-06 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-11 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-11 170416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-20 7981088]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-06-20 1356240]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MusicManager"=C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [2013-06-21 7345664]
"AdobeBridge"= []
"AlcoholAutomount"=C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4600 Scan2PC]
C:\Windows\twain_32\Samsung\SCX4600\Scan2Pc.exe [2009-09-10 1968640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\5C15FE23AEB342AF49561D34CA158610F3B7D4A6._service_run]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-09-02 829392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DelReg]
C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dxtory Update Checker 2.0]
C:\Program Files (x86)\Dxtory Software\Dxtory2.0\UpdateChecker.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
H:\Origin\Origin.exe [2013-09-05 3551576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Fifa\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hey, Joe!]
C:\Program Files (x86)\Hey, Joe!\HeyJoe.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LchDrvKey]
LchDrvKey.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManyCam]
C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MusicManager]
C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [2013-06-21 7345664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NetSoftware]
C:\Program Files\NetSoftware\Starter.exe /path=C:\Program Files\NetSoftware []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrivitizeVPN]
C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe /autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Samsung PanelMgr]
C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2013-03-08 699952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC]
C:\Program Files (x86)\Uniblue\SpeedUpMyPC\launcher.exe -d 20000 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdater]
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
H:\Steam\steam.exe [2013-09-11 1814440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Unified Remote v2]
C:\Program Files (x86)\Unified Remote\RemoteServer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMonitorVMUVC]
C:\Program Files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe VMUVC []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^DualCoreCenter.lnk]
C:\Program Files (x86)\MSI\DualCoreCenter\StartUpDualCoreCenter.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Fifa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Fifa\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Fifa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk]
C:\Users\Fifa\AppData\Local\Facebook\MESSEN~1\214590~1.0\FACEBO~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Fifa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk]
C:\PROGRA~2\Hamachi\hamachi.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"NPSStartup"= []
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2013-03-17 247296]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2013-09-12 17:13:19 ----D---- C:\rsit
2013-09-11 22:51:47 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-09-11 22:51:46 ----A---- C:\Windows\system32\ieui.dll
2013-09-11 22:51:45 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-09-11 22:51:45 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-09-11 22:51:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-09-11 22:51:45 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-09-11 22:51:45 ----A---- C:\Windows\system32\iesetup.dll
2013-09-11 22:51:45 ----A---- C:\Windows\system32\iernonce.dll
2013-09-11 22:51:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-09-11 22:51:44 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 22:51:44 ----A---- C:\Windows\system32\iesysprep.dll
2013-09-11 22:51:44 ----A---- C:\Windows\system32\iertutil.dll
2013-09-11 22:51:44 ----A---- C:\Windows\system32\ie4uinit.exe
2013-09-11 22:51:42 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-09-11 22:51:42 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-09-11 22:51:42 ----A---- C:\Windows\system32\msfeeds.dll
2013-09-11 22:51:42 ----A---- C:\Windows\system32\jscript.dll
2013-09-11 22:51:41 ----A---- C:\Windows\system32\jscript9.dll
2013-09-11 22:51:40 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-09-11 22:51:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-09-11 22:51:39 ----A---- C:\Windows\system32\urlmon.dll
2013-09-11 22:51:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-09-11 22:51:38 ----A---- C:\Windows\system32\jsproxy.dll
2013-09-11 22:51:37 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-09-11 22:51:37 ----A---- C:\Windows\system32\wininet.dll
2013-09-11 22:51:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-09-11 22:51:35 ----A---- C:\Windows\system32\ieframe.dll
2013-09-11 22:51:33 ----A---- C:\Windows\system32\mshtml.dll
2013-09-11 22:51:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-09-11 22:38:25 ----A---- C:\Users\Pavel\AppData\Roaming\alsoft.ini
2013-09-11 22:38:09 ----D---- C:\Users\Pavel\AppData\Roaming\FEZ
2013-09-11 20:14:30 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-09-11 20:14:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-09-11 20:14:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-09-11 20:14:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-09-11 20:14:26 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-09-11 20:14:26 ----A---- C:\Windows\system32\ntdll.dll
2013-09-11 20:14:26 ----A---- C:\Windows\system32\KernelBase.dll
2013-09-11 20:14:25 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-09-11 20:14:25 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-09-11 20:14:25 ----A---- C:\Windows\system32\wow64.dll
2013-09-11 20:14:25 ----A---- C:\Windows\system32\winsrv.dll
2013-09-11 20:14:25 ----A---- C:\Windows\system32\smss.exe
2013-09-11 20:14:25 ----A---- C:\Windows\system32\kernel32.dll
2013-09-11 20:14:25 ----A---- C:\Windows\system32\csrsrv.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 20:14:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 20:14:24 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-09-11 20:14:24 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-09-11 20:14:24 ----A---- C:\Windows\system32\wow64win.dll
2013-09-11 20:14:24 ----A---- C:\Windows\system32\wow64cpu.dll
2013-09-11 20:14:24 ----A---- C:\Windows\system32\ntvdm64.dll
2013-09-11 20:14:24 ----A---- C:\Windows\system32\conhost.exe
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 20:14:23 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 20:14:22 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 20:14:21 ----A---- C:\Windows\SYSWOW64\user.exe
2013-09-11 20:14:21 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-09-11 20:14:21 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-09-11 20:14:21 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-09-11 20:14:21 ----A---- C:\Windows\system32\apisetschema.dll
2013-09-11 20:14:20 ----A---- C:\Windows\system32\win32k.sys
2013-09-11 20:14:19 ----A---- C:\Windows\system32\shell32.dll
2013-09-11 20:14:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-09-11 20:14:18 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-09-11 20:14:17 ----A---- C:\Windows\system32\shdocvw.dll
2013-09-08 20:18:54 ----D---- C:\Windows\SYSWOW64\iq
2013-09-08 15:38:14 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-09-08 13:07:16 ----D---- C:\AdwCleaner
2013-09-08 12:57:17 ----D---- C:\Users\Pavel\AppData\Roaming\RocketPDF
2013-09-08 12:56:48 ----D---- C:\Users\Pavel\AppData\Roaming\SpeedAnalysis3
2013-09-08 11:26:54 ----D---- C:\Program Files (x86)\Alcohol Soft
2013-09-08 11:08:32 ----A---- C:\Windows\system32\drivers\sptd.sys
2013-09-08 11:01:31 ----D---- C:\Fast_Temp
2013-09-08 11:00:39 ----D---- C:\Users\Pavel\AppData\Roaming\RZSoft Inc
2013-09-07 19:19:12 ----D---- C:\ProgramData\SMSI
2013-09-07 01:12:22 ----D---- C:\ProgramData\gamemaker_studio
2013-09-06 22:08:24 ----D---- C:\Users\Pavel\AppData\Roaming\Red Alert 3 Uprising
2013-09-06 22:03:51 ----SHD---- C:\ProgramData\DSS
2013-09-06 22:00:51 ----D---- C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-09-03 14:33:20 ----D---- C:\Users\Pavel\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-09-03 14:20:46 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-09-03 14:18:59 ----D---- C:\Program Files\Adobe
2013-09-03 14:12:07 ----D---- C:\Program Files\Common Files\Adobe
2013-08-30 20:31:51 ----D---- C:\Users\Pavel\AppData\Roaming\CAD-KAS
2013-08-30 20:31:38 ----A---- C:\Windows\cadkasdeinst01e.exe
2013-08-28 07:48:06 ----D---- C:\ProgramData\EA Core
2013-08-28 00:49:03 ----A---- C:\Windows\SYSWOW64\vp6vfw.dll
2013-08-24 10:24:33 ----D---- C:\Minecraft_Backup
2013-08-16 21:37:30 ----D---- C:\Users\Pavel\AppData\Roaming\Origin
2013-08-16 21:34:49 ----D---- C:\ProgramData\Origin
2013-08-16 10:46:14 ----A---- C:\Windows\system32\drivers\cnnctfy3.sys
2013-08-16 10:45:51 ----D---- C:\ProgramData\Connectify
2013-08-16 10:45:34 ----D---- C:\ProgramData\Package Cache
2013-08-14 17:22:24 ----N---- C:\Windows\system32\athurx.sys
2013-08-14 17:22:24 ----A---- C:\Windows\system32\drivers\athurx.sys
2013-08-14 17:21:03 ----D---- C:\ProgramData\TP-LINK
2013-08-14 12:48:51 ----D---- C:\Program Files (x86)\Uplink
2013-08-14 09:34:00 ----A---- C:\Windows\system32\crypt32.dll
2013-08-14 09:33:59 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-08-14 09:33:59 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-08-14 09:33:59 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-08-14 09:33:59 ----A---- C:\Windows\system32\wintrust.dll
2013-08-14 09:33:59 ----A---- C:\Windows\system32\cryptsvc.dll
2013-08-14 09:33:58 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-08-14 09:33:58 ----A---- C:\Windows\system32\cryptnet.dll
2013-08-14 09:33:43 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-08-14 09:33:43 ----A---- C:\Windows\system32\tzres.dll
2013-08-14 09:33:27 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-08-14 09:33:26 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-08-14 09:33:24 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-08-14 09:33:24 ----A---- C:\Windows\system32\rpcrt4.dll
2013-08-14 09:33:11 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-08-14 09:33:09 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-08-14 09:33:09 ----A---- C:\Windows\system32\drivers\netio.sys
2013-08-14 09:33:09 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-08-13 11:41:35 ----D---- C:\totalcmd

======List of files/folders modified in the last 1 months======

2013-09-12 17:13:25 ----D---- C:\Program Files\trend micro
2013-09-12 17:13:23 ----D---- C:\Windows\temp
2013-09-12 11:55:02 ----D---- C:\Windows\system32\config
2013-09-12 11:34:47 ----D---- C:\Windows\system32\inetsrv
2013-09-12 11:33:23 ----D---- C:\Windows\Prefetch
2013-09-12 11:33:03 ----D---- C:\Windows\winsxs
2013-09-12 11:32:34 ----D---- C:\Program Files (x86)\SpeedFan
2013-09-12 11:30:07 ----D---- C:\Windows\SysWOW64
2013-09-12 11:30:07 ----D---- C:\Program Files (x86)\Internet Explorer
2013-09-12 11:30:06 ----D---- C:\Windows\System32
2013-09-12 11:30:06 ----D---- C:\Program Files\Internet Explorer
2013-09-12 11:30:02 ----D---- C:\Windows\AppPatch
2013-09-12 11:30:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-09-12 11:30:01 ----D---- C:\Windows\system32\cs-CZ
2013-09-12 11:29:58 ----D---- C:\Windows\system32\DriverStore
2013-09-12 11:29:58 ----D---- C:\Windows\system32\drivers
2013-09-11 22:52:40 ----D---- C:\Windows\Microsoft.NET
2013-09-11 22:52:20 ----D---- C:\Windows\system32\catroot
2013-09-11 22:52:16 ----D---- C:\Windows\system32\catroot2
2013-09-11 22:51:48 ----RSD---- C:\Windows\assembly
2013-09-11 22:48:21 ----D---- C:\Windows\system32\MRT
2013-09-11 22:48:19 ----A---- C:\Windows\system32\MRT.exe
2013-09-11 22:48:15 ----SHD---- C:\Windows\Installer
2013-09-11 22:48:07 ----D---- C:\ProgramData\Microsoft Help
2013-09-11 22:40:59 ----SHD---- C:\System Volume Information
2013-09-11 22:38:08 ----D---- C:\Program Files (x86)\OpenAL
2013-09-11 22:38:08 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-09-11 22:38:08 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-09-11 22:38:08 ----A---- C:\Windows\system32\wrap_oal.dll
2013-09-11 22:38:08 ----A---- C:\Windows\system32\OpenAL32.dll
2013-09-11 16:14:56 ----D---- C:\Users\Pavel\AppData\Roaming\.minecraft
2013-09-10 19:17:30 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-09-10 19:09:47 ----A---- C:\Windows\BlendSettings.ini
2013-09-09 20:30:00 ----D---- C:\Users\Pavel\AppData\Roaming\Mp3tag
2013-09-09 20:28:32 ----D---- C:\Program Files (x86)\Mp3tag
2013-09-09 20:26:12 ----D---- C:\Windows\inf
2013-09-09 20:26:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-09 20:25:01 ----RD---- C:\Program Files (x86)
2013-09-09 17:33:17 ----SD---- C:\Users\Pavel\AppData\Roaming\Microsoft
2013-09-09 12:11:54 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-08 20:20:46 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-09-08 20:20:46 ----D---- C:\Program Files (x86)\Common Files
2013-09-08 18:07:17 ----D---- C:\Windows\SYSWOW64\directx
2013-09-08 18:06:48 ----HD---- C:\Windows\msdownld.tmp
2013-09-08 13:08:13 ----D---- C:\Windows\system32\Tasks
2013-09-08 13:08:12 ----D---- C:\ProgramData
2013-09-08 13:00:10 ----D---- C:\Windows\Tasks
2013-09-08 12:57:18 ----HD---- C:\Program Files (x86)\Uninstall Information
2013-09-07 09:24:30 ----D---- C:\Program Files\Paint.NET
2013-09-06 23:15:00 ----D---- C:\Users\Pavel\AppData\Roaming\Adobe
2013-09-06 23:14:22 ----D---- C:\ProgramData\Adobe
2013-09-06 22:00:51 ----D---- C:\Windows
2013-09-03 14:19:11 ----D---- C:\Program Files (x86)\Adobe
2013-09-03 14:18:59 ----RD---- C:\Program Files
2013-09-03 14:18:04 ----RSD---- C:\Windows\Fonts
2013-09-03 14:12:07 ----D---- C:\Program Files\Common Files
2013-09-02 13:34:31 ----D---- C:\Program Files\2K Games
2013-08-31 22:50:47 ----D---- C:\Users\Pavel\AppData\Roaming\Audacity
2013-08-31 22:15:44 ----D---- C:\Program Files (x86)\WugFresh Development
2013-08-30 10:50:41 ----D---- C:\Users\Pavel\AppData\Roaming\vlc
2013-08-28 21:05:44 ----D---- C:\Users\Pavel\AppData\Roaming\Mozilla
2013-08-28 07:59:27 ----D---- C:\ProgramData\Electronic Arts
2013-08-19 18:59:47 ----D---- C:\Program Files (x86)\Sid Meier's Civilization V
2013-08-18 15:51:25 ----D---- C:\Windows\rescache
2013-08-17 20:40:45 ----D---- C:\Windows\system32\NDF
2013-08-17 11:22:01 ----D---- C:\Program Files (x86)\Farming Simulator 2013
2013-08-17 10:20:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-08-16 10:34:13 ----D---- C:\Windows\SYSWOW64\en-US
2013-08-16 10:34:13 ----D---- C:\Windows\system32\en-US
2013-08-14 17:24:56 ----SD---- C:\ProgramData\Microsoft
2013-08-14 17:22:28 ----D---- C:\Temp
2013-08-13 11:42:19 ----D---- C:\Users\Pavel\AppData\Roaming\GHISLER

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-06-18 247216]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-09-08 564824]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-09-21 283200]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2011-12-21 219440]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2011-12-21 44848]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-01-07 314016]
R2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [2009-02-16 53816]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-01-07 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 139616]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2011-12-17 51496]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2009-02-16 11576]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-20 1831968]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-07-16 82816]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2011-12-21 164656]
R3 vncmirror;vncmirror; C:\Windows\system32\DRIVERS\vncmirror.sys [2013-03-04 4608]
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.SYS []
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys []
S2 SVKP;SVKP; \??\C:\Windows\syswow64\SVKP.sys [2013-05-06 2368]
S3 athur;Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2012-10-18 1930240]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 cpuz130;cpuz130; \??\C:\Users\Pavel\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\1.3\temp\FairplayKD.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 LarkScan;LarkScan; \??\C:\Program Files (x86)\Lark Anti-Spyware\LarkScan.sys []
S3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [2012-01-11 34304]
S3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2012-02-22 28160]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 MSILiveVirtualCamera;MSI Live Virtual Camera; C:\Windows\system32\DRIVERS\MSILiveVirtualCamera.sys [2007-01-29 456192]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 PRODIGY;PRODIGY; C:\Windows\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
S3 SASENUM;SASENUM; \??\C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS []
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 161280]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2011-08-28 15672]
S3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2008-01-25 35112]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 uvhid;Unified Virtual HID; C:\Windows\system32\DRIVERS\uvhid.sys [2013-04-11 20992]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2011-12-21 144688]
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2011-12-21 46384]
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VMUVC;Vimicro Camera Service VMUVC; C:\Windows\system32\drivers\VMUVC.sys []
S3 vserial;ELTIMA Virtual Serial Ports Driver; C:\Windows\System32\DRIVERS\vserial.sys []
S3 vvftUVC;Vimicro Camera Filter Service VMUVC; C:\Windows\system32\drivers\vvftUVC.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 ftpsvc;@%windir%\system32\inetsrv\ftpres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2010-11-20 15872]
R2 iprip;@%Systemroot%\system32\iprip.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-06-20 23808]
R2 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
R2 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-06-20 366600]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 Apache2.4;Apache2.4; C:\Users\Pavel\Downloads\xampp-win32-1.8.1-vc9\xampp\apache\bin\httpd.exe [2012-08-18 22016]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-02 116648]
S2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe []
S2 SplashtopRemoteService;Splashtop® Remote Service; C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-10 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-02 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-08-28 563624]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 vncserver;VNC Server; C:\Program Files\RealVNC\VNC Server\vncserver.exe [2013-03-04 4774208]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-04 1255736]
S4 AppHostSvc;Pomocná služba hostitele aplikace; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S4 LPDSVC;Služba LPD; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 simptcp;Jednoduché služby TCP/IP; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-07-14 81920]
S4 W3SVC;Služba Publikování na webu; C:\Windows\system32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Zdravím, nic špatného nevidím.

Děkuji,
přeji krásný den.

Není zač a