VIRY.CZ

Mam problem neviem ci pri vyssom zatazeny procesoru alebo RAM my odpaja kalvesnicu a mys. Ani ked vytiahnem z USB portou tak nepomoze. Napr pri ETS 2 este ked mam zapojeny aj volant tak my to nevypadne ale napr. pri nejakych strielacka cca po 10 min to vypadne. skusal som aj inu klavesnicu a mys a nic. Ani po preinstalovani windowsu sa nic nestalo stale sa to opakuje. Za kazdu radu dakujem. prikaldam aj log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Domaci at 2013-09-29 17:31:57
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 879 GB (93%) free of 941 GB
Total RAM: 4077 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:32:01, on 29. 9. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Domaci.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKCU\..\Run: [Advanced SystemCare 4] "C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe" /m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10261 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe"
WLIDSvcM.exe 1240
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f4c96ea5-c6da-4ac8-9c16-e66872fa3020 -SystemEventPortName:HostProcess-967fca14-bb8e-4ee7-ab14-62f1ccc463d8 -IoCancelEventPortName:HostProcess-c3728648-7630-4eed-abf5-19669b6bb69d -NonStateChangingEventPortName:HostProcess-4b1711fc-89d4-4b36-9018-cd00ff002eb3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5390954a-6858-46e8-b63a-54d9db84234b
taskeng.exe {67AD7EA4-0E72-433F-94DC-CBA692B53F74}
"C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe" /TUStart /pid:1208
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {808EB5C1-97E5-4D2A-8FA3-26C26E794BE9}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\PMonitor.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe"
"C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe" /m
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2604.0.554415804\1053160877" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x1040 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2723 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=D3D11Experiment/Disabled/ForceCompositingMode/thread/InfiniteCache/No/Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_84/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/ --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2604.8.789674177\1396418191" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=D3D11Experiment/Disabled/ForceCompositingMode/thread/InfiniteCache/No/Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_84/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/ --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2604.10.1374543480\555047402" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2604.11.183774637\78578953" --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=D3D11Experiment/Disabled/ForceCompositingMode/thread/InfiniteCache/No/Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_84/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/ --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2604.15.628123937\664525602" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=D3D11Experiment/Disabled/ForceCompositingMode/thread/InfiniteCache/No/Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_84/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/ --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2604.16.378046144\933868197" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials=D3D11Experiment/Disabled/ForceCompositingMode/thread/InfiniteCache/No/Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_84/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/ --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2604.18.108503628\1336739800" /prefetch:673131151
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Domaci\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 4"=C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe [2011-08-09 417112]
"uTorrent"=C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe [2013-09-28 1043536]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"SmartRAM"=C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe [2011-08-09 373080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2011-02-10 61112]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-09-25 52920]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-09-29 17:31:57 ----D---- C:\rsit
2013-09-29 17:31:57 ----D---- C:\Program Files\trend micro
2013-09-29 12:48:08 ----D---- C:\Users\Domaci\AppData\Roaming\.minecraft
2013-09-29 10:26:38 ----D---- C:\2-click run
2013-09-29 10:26:25 ----D---- C:\Program Files (x86)\Euro truck 2
2013-09-28 20:28:23 ----D---- C:\Users\Domaci\AppData\Roaming\Macromedia
2013-09-28 20:28:22 ----A---- C:\Windows\SYSWOW64\win_utilman.exe
2013-09-28 20:28:20 ----D---- C:\Users\Domaci\AppData\Roaming\_MDLogs
2013-09-28 15:55:05 ----D---- C:\Users\Domaci\AppData\Roaming\TS3Client
2013-09-28 15:54:57 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-28 13:00:42 ----D---- C:\Users\Domaci\AppData\Roaming\CyberLink
2013-09-28 12:52:46 ----D---- C:\Program Files (x86)\PAYDAY 2
2013-09-28 12:25:47 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2013-09-28 12:25:47 ----A---- C:\Windows\system32\uxtuneup.dll
2013-09-28 12:22:03 ----N---- C:\bootsqm.dat
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\ntshrui.dll
2013-09-28 12:15:04 ----A---- C:\Windows\system32\drivers\afd.sys
2013-09-28 12:15:00 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-09-28 12:15:00 ----A---- C:\Windows\system32\msvcrt.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspisrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsass.exe
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsasrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\cng.sys
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\qdvd.dll
2013-09-28 12:14:47 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-09-28 12:14:47 ----A---- C:\Windows\system32\packager.dll
2013-09-28 12:13:12 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-09-28 12:13:12 ----A---- C:\Windows\system32\EncDec.dll
2013-09-28 12:12:55 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-09-28 12:12:55 ----A---- C:\Windows\system32\psisdecd.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleacc.dll
2013-09-28 12:06:42 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-09-28 12:06:42 ----A---- C:\Windows\system32\xmllite.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccp32.dll
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-09-28 12:05:29 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\tquery.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\msscntrs.dll
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv.sys
2013-09-28 12:05:10 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-09-28 12:05:10 ----A---- C:\Windows\system32\inetcomm.dll
2013-09-28 12:05:07 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-09-28 12:05:05 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-09-28 12:05:05 ----A---- C:\Windows\system32\poqexec.exe
2013-09-28 12:04:57 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-09-28 12:04:57 ----A---- C:\Windows\system32\prevhost.exe
2013-09-28 12:04:53 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-09-28 12:04:53 ----A---- C:\Windows\explorer.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsapi.dll
2013-09-28 12:04:44 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-09-28 12:04:40 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\winresume.exe
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdusb.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdcom.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kd1394.dll
2013-09-28 12:04:25 ----A---- C:\Windows\system32\winload.exe
2013-09-28 12:03:39 ----D---- C:\Windows\SYSWOW64\Wat
2013-09-28 12:03:39 ----D---- C:\Windows\system32\Wat
2013-09-28 12:02:05 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2013-09-28 12:02:05 ----A---- C:\Windows\system32\TURegOpt.exe
2013-09-28 12:02:05 ----A---- C:\Windows\system32\authuitu.dll
2013-09-28 12:01:51 ----D---- C:\Users\Domaci\AppData\Roaming\TuneUp Software
2013-09-28 12:01:44 ----D---- C:\Program Files (x86)\TuneUp Utilities 2012
2013-09-28 12:01:22 ----D---- C:\ProgramData\TuneUp Software
2013-09-28 12:01:18 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-09-28 12:01:18 ----HD---- C:\ProgramData\Common Files
2013-09-28 11:58:31 ----D---- C:\Users\Domaci\AppData\Roaming\uTorrent
2013-09-28 11:46:01 ----D---- C:\ProgramData\IObit
2013-09-28 11:44:33 ----D---- C:\Users\Domaci\AppData\Roaming\IObit
2013-09-28 11:44:30 ----D---- C:\Program Files (x86)\IObit
2013-09-28 11:36:51 ----D---- C:\Program Files\CCleaner
2013-09-28 11:31:29 ----D---- C:\Program Files\7-Zip
2013-09-28 11:17:11 ----D---- C:\ProgramData\ESET
2013-09-28 11:17:11 ----D---- C:\Program Files\ESET
2013-09-28 10:32:38 ----D---- C:\Users\Domaci\AppData\Roaming\HP Support Assistant
2013-09-28 10:32:31 ----D---- C:\Users\Domaci\AppData\Roaming\HpUpdate
2013-09-28 07:35:41 ----D---- C:\ProgramData\Recovery
2013-09-28 06:36:42 ----SHD---- C:\System Volume Information
2013-09-28 06:36:42 ----ASH---- C:\pagefile.sys
2013-09-28 06:36:42 ----ASH---- C:\hiberfil.sys
2013-09-27 22:01:30 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-09-27 22:00:54 ----D---- C:\ProgramData\NVIDIA
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvvsvc.exe
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvcr.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvc64.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvshext.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvmctray.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvcpl.dll
2013-09-27 22:00:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-09-27 22:00:37 ----A---- C:\Windows\system32\OpenCL.dll
2013-09-27 22:00:34 ----D---- C:\ProgramData\NVIDIA Corporation
2013-09-27 22:00:31 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglv64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvinitx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvIFR64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdap64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvFBC64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispgenco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvaudcap64v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvapi64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-09-27 21:52:04 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-09-27 21:52:04 ----A---- C:\Windows\system32\rdpcore.dll
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\GUM83FD.tmp
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\Google
2013-09-27 21:49:57 ----A---- C:\Program Files (x86)\GUT83FE.tmp
2013-09-27 21:49:29 ----D---- C:\Users\Domaci\AppData\Roaming\Adobe
2013-09-27 21:48:24 ----D---- C:\Users\Domaci\AppData\Roaming\Identities
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wups2.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wucltux.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuaueng.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuauclt.exe
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wups.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wudriver.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wuapi.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuwebv.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuapp.exe
2013-09-27 21:43:26 ----D---- C:\Users\Domaci\AppData\Roaming\Hewlett-Packard
2013-09-27 21:43:24 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2013-09-27 21:42:47 ----SD---- C:\Users\Domaci\AppData\Roaming\Microsoft
2013-09-27 21:42:47 ----D---- C:\Users\Domaci\AppData\Roaming\Media Center Programs
2013-09-27 21:41:23 ----D---- C:\Windows\SoftwareDistribution
2013-09-12 01:17:50 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe

======List of files/folders modified in the last 1 month======

2013-09-29 17:32:00 ----D---- C:\Windows\Temp
2013-09-29 17:31:57 ----RD---- C:\Program Files
2013-09-29 17:29:38 ----A---- C:\Windows\SYSWOW64\log.txt
2013-09-29 17:28:04 ----D---- C:\Windows\system32\config
2013-09-29 17:27:35 ----D---- C:\ProgramData\PDFC
2013-09-29 17:27:18 ----AD---- C:\Windows
2013-09-29 13:01:56 ----D---- C:\Windows\system32\Tasks
2013-09-29 12:17:39 ----D---- C:\Windows\System32
2013-09-29 12:17:39 ----D---- C:\Windows\inf
2013-09-29 12:17:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-29 10:26:32 ----RD---- C:\Program Files (x86)
2013-09-29 10:25:16 ----D---- C:\Windows\Prefetch
2013-09-29 10:23:32 ----D---- C:\Windows\system32\wdi
2013-09-28 20:30:37 ----D---- C:\Program Files (x86)\EasyBits For Kids
2013-09-28 20:28:22 ----AD---- C:\Windows\SysWOW64
2013-09-28 15:44:30 ----D---- C:\Windows\system32\drivers
2013-09-28 15:44:20 ----D---- C:\Windows\system32\drivers\UMDF
2013-09-28 14:14:33 ----RSD---- C:\Windows\assembly
2013-09-28 14:14:33 ----D---- C:\Windows\Microsoft.NET
2013-09-28 13:32:50 ----D---- C:\Windows\system32\catroot2
2013-09-28 13:00:42 ----D---- C:\ProgramData\CyberLink
2013-09-28 12:47:23 ----D---- C:\Windows\system32\LogFiles
2013-09-28 12:25:49 ----SHD---- C:\Windows\Installer
2013-09-28 12:23:23 ----D---- C:\Windows\winsxs
2013-09-28 12:19:12 ----D---- C:\Windows\ehome
2013-09-28 12:19:12 ----D---- C:\Program Files\Internet Explorer
2013-09-28 12:19:12 ----D---- C:\Program Files\Common Files\System
2013-09-28 12:19:12 ----D---- C:\Program Files (x86)\Internet Explorer
2013-09-28 12:19:11 ----RSD---- C:\Windows\Fonts
2013-09-28 12:19:10 ----D---- C:\Windows\system32\Boot
2013-09-28 12:14:31 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-09-28 12:13:09 ----D---- C:\Windows\system32\catroot
2013-09-28 12:01:22 ----HD---- C:\ProgramData
2013-09-28 11:37:43 ----D---- C:\Windows\Panther
2013-09-28 11:37:42 ----D---- C:\Windows\Logs
2013-09-28 11:37:42 ----D---- C:\Windows\debug
2013-09-28 11:17:44 ----D---- C:\Windows\system32\DriverStore
2013-09-28 11:15:34 ----D---- C:\ProgramData\Norton
2013-09-28 11:14:36 ----D---- C:\Program Files\Common Files
2013-09-28 06:41:05 ----D---- C:\Windows\rescache
2013-09-28 06:39:47 ----D---- C:\ProgramData\Hewlett-Packard
2013-09-28 06:38:58 ----D---- C:\Windows\system32\sysprep
2013-09-27 22:01:31 ----D---- C:\Program Files\NVIDIA Corporation
2013-09-27 22:00:55 ----RD---- C:\Users
2013-09-27 21:59:53 ----D---- C:\Windows\Tasks
2013-09-27 21:53:51 ----D---- C:\Windows\system32\restore
2013-09-27 21:52:14 ----D---- C:\Windows\system32\sk-SK
2013-09-27 21:52:14 ----D---- C:\Windows\system32\en-US
2013-09-27 21:52:14 ----D---- C:\Windows\system32\cs-CZ
2013-09-27 21:48:23 ----SHD---- C:\$RECYCLE.BIN
2013-09-27 21:48:21 ----D---- C:\swsetup
2013-09-27 21:48:17 ----RHD---- C:\SYSTEM.SAV
2013-09-27 21:43:20 ----RD---- C:\Program Files\Online Services
2013-09-27 21:43:20 ----RD---- C:\Program Files (x86)\Online Services
2013-09-27 21:43:15 ----D---- C:\Program Files\Windows Sidebar
2013-09-27 21:43:15 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-09-27 21:42:55 ----D---- C:\Windows\SYSWOW64\drivers
2013-09-27 21:41:25 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2010-11-05 438808]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2012-03-29 11856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-08-09 328536]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-26 92216]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-08-27 14997280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2011-02-01 1127448]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2012-05-29 2143072]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-19 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-26 791608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-28 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Zdravím!
1. Odinstalujte AdvancedSystemCare. Tento program v rukou laika dokáže poškodit oper. systém, nebo aplikace.
2. Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.005 - Report created 29/09/2013 at 18:36:28
# Updated 22/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Domaci - DOMACI-HP
# Running from : C:\Users\Domaci\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Google Chrome v29.0.1547.76

[ File : C:\Users\Domaci\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [1898 octets] - [29/09/2013 18:35:36]
AdwCleaner[S0].txt - [1493 octets] - [29/09/2013 18:36:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1553 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Domaci at 2013-09-29 18:45:46
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 878 GB (93%) free of 941 GB
Total RAM: 4077 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:45:50, on 29. 9. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\trend micro\Domaci.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe" /m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9160 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {5DBAEC7D-AB77-4DA7-B2F0-2CB4C07B7FE1}
taskeng.exe {B919DD0E-4043-403C-BA44-A72F82739A9C}
C:\Windows\Explorer.EXE
"C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe"
WLIDSvcM.exe 1128
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-709d0260-e21b-486e-a567-ce6f17251882 -SystemEventPortName:HostProcess-7039d405-25f8-48e0-9418-09536e6a40a1 -IoCancelEventPortName:HostProcess-8dfe2ae5-2d26-49d0-8443-fa9f737f13fb -NonStateChangingEventPortName:HostProcess-064e4595-fc91-46c2-adfb-9de409d58023 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:054f878d-cd0f-4e9d-a6da-13123849dd1e
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe
"C:\Users\Domaci\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar BHO - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll [2010-08-14 609544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe [2013-09-28 1043536]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"SmartRAM"=C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe /m []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2011-02-10 61112]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-09-25 52920]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-09-29 18:33:30 ----D---- C:\AdwCleaner
2013-09-29 17:31:57 ----D---- C:\rsit
2013-09-29 17:31:57 ----D---- C:\Program Files\trend micro
2013-09-29 12:48:08 ----D---- C:\Users\Domaci\AppData\Roaming\.minecraft
2013-09-29 10:26:38 ----D---- C:\2-click run
2013-09-29 10:26:25 ----D---- C:\Program Files (x86)\Euro truck 2
2013-09-28 20:28:23 ----D---- C:\Users\Domaci\AppData\Roaming\Macromedia
2013-09-28 20:28:22 ----A---- C:\Windows\SYSWOW64\win_utilman.exe
2013-09-28 20:28:20 ----D---- C:\Users\Domaci\AppData\Roaming\_MDLogs
2013-09-28 15:55:05 ----D---- C:\Users\Domaci\AppData\Roaming\TS3Client
2013-09-28 15:54:57 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-28 13:00:42 ----D---- C:\Users\Domaci\AppData\Roaming\CyberLink
2013-09-28 12:52:46 ----D---- C:\Program Files (x86)\PAYDAY 2
2013-09-28 12:22:03 ----N---- C:\bootsqm.dat
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\ntshrui.dll
2013-09-28 12:15:04 ----A---- C:\Windows\system32\drivers\afd.sys
2013-09-28 12:15:00 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-09-28 12:15:00 ----A---- C:\Windows\system32\msvcrt.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspisrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsass.exe
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsasrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\cng.sys
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\qdvd.dll
2013-09-28 12:14:47 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-09-28 12:14:47 ----A---- C:\Windows\system32\packager.dll
2013-09-28 12:13:12 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-09-28 12:13:12 ----A---- C:\Windows\system32\EncDec.dll
2013-09-28 12:12:55 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-09-28 12:12:55 ----A---- C:\Windows\system32\psisdecd.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleacc.dll
2013-09-28 12:06:42 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-09-28 12:06:42 ----A---- C:\Windows\system32\xmllite.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccp32.dll
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-09-28 12:05:29 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\tquery.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\msscntrs.dll
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv.sys
2013-09-28 12:05:10 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-09-28 12:05:10 ----A---- C:\Windows\system32\inetcomm.dll
2013-09-28 12:05:07 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-09-28 12:05:05 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-09-28 12:05:05 ----A---- C:\Windows\system32\poqexec.exe
2013-09-28 12:04:57 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-09-28 12:04:57 ----A---- C:\Windows\system32\prevhost.exe
2013-09-28 12:04:53 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-09-28 12:04:53 ----A---- C:\Windows\explorer.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsapi.dll
2013-09-28 12:04:44 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-09-28 12:04:40 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\winresume.exe
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdusb.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdcom.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kd1394.dll
2013-09-28 12:04:25 ----A---- C:\Windows\system32\winload.exe
2013-09-28 12:03:39 ----D---- C:\Windows\SYSWOW64\Wat
2013-09-28 12:03:39 ----D---- C:\Windows\system32\Wat
2013-09-28 12:01:51 ----D---- C:\Users\Domaci\AppData\Roaming\TuneUp Software
2013-09-28 12:01:44 ----D---- C:\Program Files (x86)\TuneUp Utilities 2012
2013-09-28 12:01:22 ----D---- C:\ProgramData\TuneUp Software
2013-09-28 12:01:18 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-09-28 12:01:18 ----HD---- C:\ProgramData\Common Files
2013-09-28 11:58:31 ----D---- C:\Users\Domaci\AppData\Roaming\uTorrent
2013-09-28 11:46:01 ----D---- C:\ProgramData\IObit
2013-09-28 11:44:33 ----D---- C:\Users\Domaci\AppData\Roaming\IObit
2013-09-28 11:44:30 ----D---- C:\Program Files (x86)\IObit
2013-09-28 11:36:51 ----D---- C:\Program Files\CCleaner
2013-09-28 11:31:29 ----D---- C:\Program Files\7-Zip
2013-09-28 11:17:11 ----D---- C:\ProgramData\ESET
2013-09-28 11:17:11 ----D---- C:\Program Files\ESET
2013-09-28 10:32:38 ----D---- C:\Users\Domaci\AppData\Roaming\HP Support Assistant
2013-09-28 10:32:31 ----D---- C:\Users\Domaci\AppData\Roaming\HpUpdate
2013-09-28 07:35:41 ----D---- C:\ProgramData\Recovery
2013-09-28 06:36:42 ----SHD---- C:\System Volume Information
2013-09-28 06:36:42 ----ASH---- C:\pagefile.sys
2013-09-28 06:36:42 ----ASH---- C:\hiberfil.sys
2013-09-27 22:01:30 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-09-27 22:00:54 ----D---- C:\ProgramData\NVIDIA
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvvsvc.exe
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvcr.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvc64.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvshext.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvmctray.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvcpl.dll
2013-09-27 22:00:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-09-27 22:00:37 ----A---- C:\Windows\system32\OpenCL.dll
2013-09-27 22:00:34 ----D---- C:\ProgramData\NVIDIA Corporation
2013-09-27 22:00:31 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglv64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvinitx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvIFR64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdap64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvFBC64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispgenco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvaudcap64v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvapi64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-09-27 21:52:04 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-09-27 21:52:04 ----A---- C:\Windows\system32\rdpcore.dll
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\GUM83FD.tmp
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\Google
2013-09-27 21:49:57 ----A---- C:\Program Files (x86)\GUT83FE.tmp
2013-09-27 21:49:29 ----D---- C:\Users\Domaci\AppData\Roaming\Adobe
2013-09-27 21:48:24 ----D---- C:\Users\Domaci\AppData\Roaming\Identities
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wups2.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wucltux.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuaueng.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuauclt.exe
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wups.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wudriver.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wuapi.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuwebv.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuapp.exe
2013-09-27 21:43:26 ----D---- C:\Users\Domaci\AppData\Roaming\Hewlett-Packard
2013-09-27 21:43:24 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2013-09-27 21:42:47 ----SD---- C:\Users\Domaci\AppData\Roaming\Microsoft
2013-09-27 21:42:47 ----D---- C:\Users\Domaci\AppData\Roaming\Media Center Programs
2013-09-27 21:41:23 ----D---- C:\Windows\SoftwareDistribution
2013-09-12 01:17:50 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe

======List of files/folders modified in the last 1 month======

2013-09-29 18:45:47 ----D---- C:\Windows\Temp
2013-09-29 18:45:27 ----D---- C:\Windows\system32\catroot2
2013-09-29 18:44:03 ----D---- C:\ProgramData\PDFC
2013-09-29 18:39:58 ----A---- C:\Windows\SYSWOW64\log.txt
2013-09-29 18:37:28 ----D---- C:\Windows\System32
2013-09-29 18:35:14 ----SHD---- C:\Windows\Installer
2013-09-29 18:34:47 ----D---- C:\Windows\inf
2013-09-29 18:34:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-29 18:34:32 ----D---- C:\Windows\system32\Tasks
2013-09-29 18:34:31 ----AD---- C:\Windows\SysWOW64
2013-09-29 18:28:26 ----D---- C:\Windows\system32\config
2013-09-29 17:31:57 ----RD---- C:\Program Files
2013-09-29 17:27:18 ----AD---- C:\Windows
2013-09-29 10:26:32 ----RD---- C:\Program Files (x86)
2013-09-29 10:25:16 ----D---- C:\Windows\Prefetch
2013-09-29 10:23:32 ----D---- C:\Windows\system32\wdi
2013-09-28 20:30:37 ----D---- C:\Program Files (x86)\EasyBits For Kids
2013-09-28 15:44:30 ----D---- C:\Windows\system32\drivers
2013-09-28 15:44:20 ----D---- C:\Windows\system32\drivers\UMDF
2013-09-28 14:14:33 ----RSD---- C:\Windows\assembly
2013-09-28 14:14:33 ----D---- C:\Windows\Microsoft.NET
2013-09-28 13:00:42 ----D---- C:\ProgramData\CyberLink
2013-09-28 12:47:23 ----D---- C:\Windows\system32\LogFiles
2013-09-28 12:23:23 ----D---- C:\Windows\winsxs
2013-09-28 12:19:12 ----D---- C:\Windows\ehome
2013-09-28 12:19:12 ----D---- C:\Program Files\Internet Explorer
2013-09-28 12:19:12 ----D---- C:\Program Files\Common Files\System
2013-09-28 12:19:12 ----D---- C:\Program Files (x86)\Internet Explorer
2013-09-28 12:19:11 ----RSD---- C:\Windows\Fonts
2013-09-28 12:19:10 ----D---- C:\Windows\system32\Boot
2013-09-28 12:14:31 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-09-28 12:13:09 ----D---- C:\Windows\system32\catroot
2013-09-28 12:01:22 ----HD---- C:\ProgramData
2013-09-28 11:37:43 ----D---- C:\Windows\Panther
2013-09-28 11:37:42 ----D---- C:\Windows\Logs
2013-09-28 11:37:42 ----D---- C:\Windows\debug
2013-09-28 11:17:44 ----D---- C:\Windows\system32\DriverStore
2013-09-28 11:15:34 ----D---- C:\ProgramData\Norton
2013-09-28 11:14:36 ----D---- C:\Program Files\Common Files
2013-09-28 06:41:05 ----D---- C:\Windows\rescache
2013-09-28 06:39:47 ----D---- C:\ProgramData\Hewlett-Packard
2013-09-28 06:38:58 ----D---- C:\Windows\system32\sysprep
2013-09-27 22:01:31 ----D---- C:\Program Files\NVIDIA Corporation
2013-09-27 22:00:55 ----RD---- C:\Users
2013-09-27 21:59:53 ----D---- C:\Windows\Tasks
2013-09-27 21:53:51 ----D---- C:\Windows\system32\restore
2013-09-27 21:52:14 ----D---- C:\Windows\system32\sk-SK
2013-09-27 21:52:14 ----D---- C:\Windows\system32\en-US
2013-09-27 21:52:14 ----D---- C:\Windows\system32\cs-CZ
2013-09-27 21:48:23 ----SHD---- C:\$RECYCLE.BIN
2013-09-27 21:48:21 ----D---- C:\swsetup
2013-09-27 21:48:17 ----RHD---- C:\SYSTEM.SAV
2013-09-27 21:43:20 ----RD---- C:\Program Files\Online Services
2013-09-27 21:43:20 ----RD---- C:\Program Files (x86)\Online Services
2013-09-27 21:43:15 ----D---- C:\Program Files\Windows Sidebar
2013-09-27 21:43:15 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-09-27 21:42:55 ----D---- C:\Windows\SYSWOW64\drivers
2013-09-27 21:41:25 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2010-11-05 438808]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-26 92216]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-08-27 14997280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2011-02-01 1127448]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-19 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-26 791608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-28 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\MSN Toolbar
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Domaci at 2013-09-29 19:03:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 879 GB (93%) free of 941 GB
Total RAM: 4077 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:03:07, on 29. 9. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\trend micro\Domaci.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe" /m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3475908126-988989911-2346495024-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8825 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {E17A1706-F8A7-4E68-B972-6A2B8F11E328}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\Explorer.EXE
taskeng.exe {3DCA753A-87EE-49CD-9AED-B7146381BA9F}
"C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe"
WLIDSvcM.exe 1224
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-444b6457-5f6e-499a-8d8f-cc05efe1764e -SystemEventPortName:HostProcess-2380ba67-b98e-4405-a7d0-85c8e6f9506e -IoCancelEventPortName:HostProcess-50bb0e60-3d0b-4120-a416-c577c5f4baaa -NonStateChangingEventPortName:HostProcess-679dccfc-584b-419c-af96-e2a92f89ef69 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:11878d9a-9721-4f71-ad02-86d267b34311
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Domaci\Desktop\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 4035152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe [2013-09-28 1043536]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"SmartRAM"=C:\Program Files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe /m []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2011-02-10 61112]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-09-25 52920]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"DisableTaskMgr"=0
"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideFastUserSwitching"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-09-29 19:00:59 ----D---- C:\_OTM
2013-09-29 18:33:30 ----D---- C:\AdwCleaner
2013-09-29 17:31:57 ----D---- C:\rsit
2013-09-29 17:31:57 ----D---- C:\Program Files\trend micro
2013-09-29 12:48:08 ----D---- C:\Users\Domaci\AppData\Roaming\.minecraft
2013-09-29 10:26:38 ----D---- C:\2-click run
2013-09-29 10:26:25 ----D---- C:\Program Files (x86)\Euro truck 2
2013-09-28 20:28:23 ----D---- C:\Users\Domaci\AppData\Roaming\Macromedia
2013-09-28 20:28:22 ----A---- C:\Windows\SYSWOW64\win_utilman.exe
2013-09-28 20:28:20 ----D---- C:\Users\Domaci\AppData\Roaming\_MDLogs
2013-09-28 15:55:05 ----D---- C:\Users\Domaci\AppData\Roaming\TS3Client
2013-09-28 15:54:57 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-28 13:00:42 ----D---- C:\Users\Domaci\AppData\Roaming\CyberLink
2013-09-28 12:52:46 ----D---- C:\Program Files (x86)\PAYDAY 2
2013-09-28 12:22:03 ----N---- C:\bootsqm.dat
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\shell32.dll
2013-09-28 12:15:14 ----A---- C:\Windows\system32\ntshrui.dll
2013-09-28 12:15:04 ----A---- C:\Windows\system32\drivers\afd.sys
2013-09-28 12:15:00 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-09-28 12:15:00 ----A---- C:\Windows\system32\msvcrt.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\webio.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspisrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\sspicli.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\schannel.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\secur32.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsass.exe
2013-09-28 12:14:55 ----A---- C:\Windows\system32\lsasrv.dll
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-09-28 12:14:55 ----A---- C:\Windows\system32\drivers\cng.sys
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\quartz.dll
2013-09-28 12:14:51 ----A---- C:\Windows\system32\qdvd.dll
2013-09-28 12:14:47 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-09-28 12:14:47 ----A---- C:\Windows\system32\packager.dll
2013-09-28 12:13:12 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-09-28 12:13:12 ----A---- C:\Windows\system32\EncDec.dll
2013-09-28 12:12:55 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-09-28 12:12:55 ----A---- C:\Windows\system32\psisdecd.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleaut32.dll
2013-09-28 12:12:51 ----A---- C:\Windows\system32\oleacc.dll
2013-09-28 12:06:42 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-09-28 12:06:42 ----A---- C:\Windows\system32\xmllite.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbctrac.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccu32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccr32.dll
2013-09-28 12:05:37 ----A---- C:\Windows\system32\odbccp32.dll
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-09-28 12:05:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-09-28 12:05:29 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-09-28 12:05:29 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-09-28 12:05:26 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\tquery.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssvp.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssrch.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssphtb.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\mssph.dll
2013-09-28 12:05:25 ----A---- C:\Windows\system32\msscntrs.dll
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-09-28 12:05:13 ----A---- C:\Windows\system32\drivers\srv.sys
2013-09-28 12:05:10 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-09-28 12:05:10 ----A---- C:\Windows\system32\inetcomm.dll
2013-09-28 12:05:07 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-09-28 12:05:05 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-09-28 12:05:05 ----A---- C:\Windows\system32\poqexec.exe
2013-09-28 12:04:57 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-09-28 12:04:57 ----A---- C:\Windows\system32\prevhost.exe
2013-09-28 12:04:53 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-09-28 12:04:53 ----A---- C:\Windows\explorer.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-09-28 12:04:48 ----A---- C:\Windows\system32\dnsapi.dll
2013-09-28 12:04:44 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-09-28 12:04:40 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42u.dll
2013-09-28 12:04:35 ----A---- C:\Windows\system32\mfc42.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\winresume.exe
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdusb.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kdcom.dll
2013-09-28 12:04:26 ----A---- C:\Windows\system32\kd1394.dll
2013-09-28 12:04:25 ----A---- C:\Windows\system32\winload.exe
2013-09-28 12:03:39 ----D---- C:\Windows\SYSWOW64\Wat
2013-09-28 12:03:39 ----D---- C:\Windows\system32\Wat
2013-09-28 12:01:51 ----D---- C:\Users\Domaci\AppData\Roaming\TuneUp Software
2013-09-28 12:01:44 ----D---- C:\Program Files (x86)\TuneUp Utilities 2012
2013-09-28 12:01:22 ----D---- C:\ProgramData\TuneUp Software
2013-09-28 12:01:18 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-09-28 12:01:18 ----HD---- C:\ProgramData\Common Files
2013-09-28 11:58:31 ----D---- C:\Users\Domaci\AppData\Roaming\uTorrent
2013-09-28 11:46:01 ----D---- C:\ProgramData\IObit
2013-09-28 11:44:33 ----D---- C:\Users\Domaci\AppData\Roaming\IObit
2013-09-28 11:44:30 ----D---- C:\Program Files (x86)\IObit
2013-09-28 11:36:51 ----D---- C:\Program Files\CCleaner
2013-09-28 11:31:29 ----D---- C:\Program Files\7-Zip
2013-09-28 11:17:11 ----D---- C:\ProgramData\ESET
2013-09-28 11:17:11 ----D---- C:\Program Files\ESET
2013-09-28 10:32:38 ----D---- C:\Users\Domaci\AppData\Roaming\HP Support Assistant
2013-09-28 10:32:31 ----D---- C:\Users\Domaci\AppData\Roaming\HpUpdate
2013-09-28 07:35:41 ----D---- C:\ProgramData\Recovery
2013-09-28 06:36:42 ----SHD---- C:\System Volume Information
2013-09-28 06:36:42 ----ASH---- C:\pagefile.sys
2013-09-28 06:36:42 ----ASH---- C:\hiberfil.sys
2013-09-27 22:01:30 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-09-27 22:00:54 ----D---- C:\ProgramData\NVIDIA
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvvsvc.exe
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvcr.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvsvc64.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvshext.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvmctray.dll
2013-09-27 22:00:47 ----A---- C:\Windows\system32\nvcpl.dll
2013-09-27 22:00:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-09-27 22:00:37 ----A---- C:\Windows\system32\OpenCL.dll
2013-09-27 22:00:34 ----D---- C:\ProgramData\NVIDIA Corporation
2013-09-27 22:00:31 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvopencl.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglv64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvinitx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvIFR64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdap64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\NvFBC64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispgenco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvdispco6432723.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvid.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcuda.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvcompiler.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvaudcap64v.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\nvapi64.dll
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-09-27 21:59:14 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-09-27 21:52:04 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-09-27 21:52:04 ----A---- C:\Windows\system32\rdpcore.dll
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-09-27 21:52:03 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\GUM83FD.tmp
2013-09-27 21:49:57 ----D---- C:\Program Files (x86)\Google
2013-09-27 21:49:57 ----A---- C:\Program Files (x86)\GUT83FE.tmp
2013-09-27 21:49:29 ----D---- C:\Users\Domaci\AppData\Roaming\Adobe
2013-09-27 21:48:24 ----D---- C:\Users\Domaci\AppData\Roaming\Identities
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wups2.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wucltux.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuaueng.dll
2013-09-27 21:47:51 ----A---- C:\Windows\system32\wuauclt.exe
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wups.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wudriver.dll
2013-09-27 21:47:49 ----A---- C:\Windows\system32\wuapi.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuwebv.dll
2013-09-27 21:47:48 ----A---- C:\Windows\system32\wuapp.exe
2013-09-27 21:43:26 ----D---- C:\Users\Domaci\AppData\Roaming\Hewlett-Packard
2013-09-27 21:43:24 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2013-09-27 21:42:47 ----SD---- C:\Users\Domaci\AppData\Roaming\Microsoft
2013-09-27 21:42:47 ----D---- C:\Users\Domaci\AppData\Roaming\Media Center Programs
2013-09-27 21:41:23 ----D---- C:\Windows\SoftwareDistribution
2013-09-12 01:17:50 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe

======List of files/folders modified in the last 1 month======

2013-09-29 19:02:09 ----D---- C:\Windows\Temp
2013-09-29 19:02:04 ----D---- C:\ProgramData\PDFC
2013-09-29 19:01:16 ----A---- C:\Windows\SYSWOW64\log.txt
2013-09-29 19:00:59 ----RD---- C:\Program Files (x86)
2013-09-29 19:00:59 ----D---- C:\Windows\Tasks
2013-09-29 18:49:47 ----D---- C:\Windows\System32
2013-09-29 18:49:46 ----D---- C:\Windows\inf
2013-09-29 18:49:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-09-29 18:45:27 ----D---- C:\Windows\system32\catroot2
2013-09-29 18:35:14 ----SHD---- C:\Windows\Installer
2013-09-29 18:34:32 ----D---- C:\Windows\system32\Tasks
2013-09-29 18:34:31 ----AD---- C:\Windows\SysWOW64
2013-09-29 18:28:26 ----D---- C:\Windows\system32\config
2013-09-29 17:31:57 ----RD---- C:\Program Files
2013-09-29 17:27:18 ----AD---- C:\Windows
2013-09-29 10:25:16 ----D---- C:\Windows\Prefetch
2013-09-29 10:23:32 ----D---- C:\Windows\system32\wdi
2013-09-28 20:30:37 ----D---- C:\Program Files (x86)\EasyBits For Kids
2013-09-28 15:44:30 ----D---- C:\Windows\system32\drivers
2013-09-28 15:44:20 ----D---- C:\Windows\system32\drivers\UMDF
2013-09-28 14:14:33 ----RSD---- C:\Windows\assembly
2013-09-28 14:14:33 ----D---- C:\Windows\Microsoft.NET
2013-09-28 13:00:42 ----D---- C:\ProgramData\CyberLink
2013-09-28 12:47:23 ----D---- C:\Windows\system32\LogFiles
2013-09-28 12:23:23 ----D---- C:\Windows\winsxs
2013-09-28 12:19:12 ----D---- C:\Windows\ehome
2013-09-28 12:19:12 ----D---- C:\Program Files\Internet Explorer
2013-09-28 12:19:12 ----D---- C:\Program Files\Common Files\System
2013-09-28 12:19:12 ----D---- C:\Program Files (x86)\Internet Explorer
2013-09-28 12:19:11 ----RSD---- C:\Windows\Fonts
2013-09-28 12:19:10 ----D---- C:\Windows\system32\Boot
2013-09-28 12:14:31 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-09-28 12:13:09 ----D---- C:\Windows\system32\catroot
2013-09-28 12:01:22 ----HD---- C:\ProgramData
2013-09-28 11:37:43 ----D---- C:\Windows\Panther
2013-09-28 11:37:42 ----D---- C:\Windows\Logs
2013-09-28 11:37:42 ----D---- C:\Windows\debug
2013-09-28 11:17:44 ----D---- C:\Windows\system32\DriverStore
2013-09-28 11:15:34 ----D---- C:\ProgramData\Norton
2013-09-28 11:14:36 ----D---- C:\Program Files\Common Files
2013-09-28 06:41:05 ----D---- C:\Windows\rescache
2013-09-28 06:39:47 ----D---- C:\ProgramData\Hewlett-Packard
2013-09-28 06:38:58 ----D---- C:\Windows\system32\sysprep
2013-09-27 22:01:31 ----D---- C:\Program Files\NVIDIA Corporation
2013-09-27 22:00:55 ----RD---- C:\Users
2013-09-27 21:53:51 ----D---- C:\Windows\system32\restore
2013-09-27 21:52:14 ----D---- C:\Windows\system32\sk-SK
2013-09-27 21:52:14 ----D---- C:\Windows\system32\en-US
2013-09-27 21:52:14 ----D---- C:\Windows\system32\cs-CZ
2013-09-27 21:48:23 ----SHD---- C:\$RECYCLE.BIN
2013-09-27 21:48:21 ----D---- C:\swsetup
2013-09-27 21:48:17 ----RHD---- C:\SYSTEM.SAV
2013-09-27 21:43:20 ----RD---- C:\Program Files\Online Services
2013-09-27 21:43:20 ----RD---- C:\Program Files (x86)\Online Services
2013-09-27 21:43:15 ----D---- C:\Program Files\Windows Sidebar
2013-09-27 21:43:15 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-09-27 21:42:55 ----D---- C:\Windows\SYSWOW64\drivers
2013-09-27 21:41:25 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\Windows\system32\drivers\iaStor.sys [2010-11-05 438808]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 137144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-23 2565736]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-28 412776]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-09-22 974944]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-26 92216]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-08-27 14997280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2011-02-01 1127448]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-19 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-19 44376]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-27 116648]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-01-26 791608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-28 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\Domaci.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPDTDF

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Doporučuji odinstalovat AdvancedSystemCare. Tento sw v rukou laika dokáže poškodit oper. systém, nebo aplikaci.

takze teraz by to uz nemalo robit problemy ??

MrKitty píše:takze teraz by to uz nemalo robit problemy ??

PC byl vyčištěm od dočasných souborů a jiných zbytečností. Musíte vyzkoušet.

tak teraz sa my to zase seklo tak neviem

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

ComboFix 13-09-28.02 - Domaci . 09. 2013 20:36:05.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.4077.2506 [GMT 2:00]
Running from: c:\users\Domaci\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2013-08-28 to 2013-09-29 )))))))))))))))))))))))))))))))
.
.
2013-09-29 16:33 . 2013-09-29 16:36 -------- d-----w- C:\AdwCleaner
2013-09-29 15:31 . 2013-09-29 17:03 -------- d-----w- c:\program files\trend micro
2013-09-29 08:26 . 2013-09-29 08:26 -------- d-----w- C:\2-click run
2013-09-29 08:26 . 2013-09-29 08:27 -------- d-----w- c:\program files (x86)\Euro truck 2
2013-09-28 18:28 . 2009-07-14 01:14 1397248 ----a-w- c:\windows\SysWow64\win_utilman.exe
2013-09-28 13:54 . 2013-09-28 13:54 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2013-09-28 11:00 . 2013-09-28 11:00 -------- d-----w- c:\users\Public\CyberLink
2013-09-28 10:52 . 2013-09-28 10:52 -------- d-----w- c:\program files (x86)\PAYDAY 2
2013-09-28 10:15 . 2013-09-28 10:15 509952 ----a-w- c:\windows\system32\ntshrui.dll
2013-09-28 10:15 . 2013-09-28 10:15 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2013-09-28 10:15 . 2013-09-28 10:15 14172672 ----a-w- c:\windows\system32\shell32.dll
2013-09-28 10:15 . 2013-09-28 10:15 515584 ----a-w- c:\windows\system32\timedate.cpl
2013-09-28 10:15 . 2013-09-28 10:15 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2013-09-28 10:15 . 2013-09-28 10:15 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2013-09-28 10:15 . 2013-09-28 10:15 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2013-09-28 10:15 . 2013-09-28 10:15 634880 ----a-w- c:\windows\system32\msvcrt.dll
2013-09-28 10:13 . 2013-09-28 10:13 723456 ----a-w- c:\windows\system32\EncDec.dll
2013-09-28 10:13 . 2013-09-28 10:13 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2013-09-28 10:13 . 2013-09-28 10:13 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-09-28 10:13 . 2013-09-28 10:13 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2013-09-28 10:12 . 2013-09-28 10:12 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2013-09-28 10:12 . 2013-09-28 10:12 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2013-09-28 10:12 . 2013-09-28 10:12 75776 ----a-w- c:\windows\SysWow64\psisrndr.ax
2013-09-28 10:12 . 2013-09-28 10:12 613888 ----a-w- c:\windows\system32\psisdecd.dll
2013-09-28 10:12 . 2013-09-28 10:12 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll
2013-09-28 10:12 . 2013-09-28 10:12 108032 ----a-w- c:\windows\system32\psisrndr.ax
2013-09-28 10:12 . 2013-09-28 10:12 861696 ----a-w- c:\windows\system32\oleaut32.dll
2013-09-28 10:12 . 2013-09-28 10:12 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2013-09-28 10:12 . 2013-09-28 10:12 331776 ----a-w- c:\windows\system32\oleacc.dll
2013-09-28 10:12 . 2013-09-28 10:12 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2013-09-28 10:06 . 2013-09-28 10:06 199680 ----a-w- c:\windows\system32\xmllite.dll
2013-09-28 10:04 . 2013-09-28 10:04 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2013-09-28 10:03 . 2013-09-28 10:03 -------- d-----w- c:\windows\SysWow64\Wat
2013-09-28 10:03 . 2013-09-28 10:03 -------- d-----w- c:\windows\system32\Wat
2013-09-28 10:01 . 2013-09-29 16:34 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2012
2013-09-28 10:01 . 2013-09-28 10:02 -------- d-----w- c:\programdata\TuneUp Software
2013-09-28 10:01 . 2013-09-28 10:01 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-09-28 10:01 . 2013-09-28 10:01 -------- d--h--w- c:\programdata\Common Files
2013-09-28 09:46 . 2013-09-28 09:47 -------- d-----w- c:\programdata\IObit
2013-09-28 09:44 . 2013-09-28 09:46 -------- d-----w- c:\program files (x86)\IObit
2013-09-28 09:36 . 2013-09-28 09:36 -------- d-----w- c:\program files\CCleaner
2013-09-28 09:31 . 2013-09-28 09:31 -------- d-----w- c:\program files\7-Zip
2013-09-28 09:17 . 2013-09-28 09:17 -------- d-----w- c:\program files\ESET
2013-09-28 08:47 . 2013-09-15 22:50 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5AB88AD6-E033-4582-A426-A506639F8D1D}\mpengine.dll
2013-09-28 05:35 . 2013-09-28 05:36 -------- d-----w- c:\programdata\Recovery
2013-09-27 19:59 . 2013-09-12 08:58 9281032 ----a-w- c:\windows\system32\nvcuda.dll
2013-09-27 19:52 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-09-27 19:52 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-09-27 19:52 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-09-27 19:52 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-09-27 19:49 . 2013-09-27 20:01 -------- d-----w- c:\program files (x86)\Google
2013-09-27 19:49 . 2013-09-27 19:52 4188160 ----a-w- c:\program files (x86)\GUT83FE.tmp
2013-09-27 19:49 . 2013-09-27 19:49 -------- d-----w- c:\program files (x86)\GUM83FD.tmp
2013-09-27 19:47 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-09-27 19:47 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-09-27 19:47 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-09-27 19:47 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-09-27 19:47 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-09-27 19:47 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-09-27 19:47 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-09-27 19:47 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-09-27 19:47 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-09-27 19:43 . 2013-09-27 19:43 -------- d-----w- c:\users\Public\Symantec
2013-09-27 19:42 . 2013-09-27 19:48 -------- d-----w- c:\users\Domaci
2013-09-11 23:17 . 2013-09-11 23:17 571168 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-28 10:14 . 2013-09-28 10:14 340992 ----a-w- c:\windows\system32\schannel.dll
2013-09-28 10:14 . 2013-09-28 10:14 224768 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-27 19:53 . 2010-06-24 18:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-08-07 02:22 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" [2013-09-28 1043536]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-02-10 61112]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-27 20:01 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 4035152]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.20
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-SmartRAM - c:\program files (x86)\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10n_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10n_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10n.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10n.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10n.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10n.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2013-09-29 20:42:45 - machine was rebooted
ComboFix-quarantined-files.txt 2013-09-29 18:42
.
Pre-Run: 920 804 769 792 bytes free
Post-Run: 920 644 157 440 bytes free
.
- - End Of File - - 95317B200C233F41F4BB4E96347A2501

Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Collect::
c:\program files (x86)\GUT83FE.tmp

Folder::
c:\program files (x86)\GUM83FD.tmp

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

ComboFix 13-09-28.02 - Domaci . 09. 2013 21:30:03.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.4077.2969 [GMT 2:00]
Running from: c:\users\Domaci\Desktop\ComboFix.exe
Command switches used :: c:\users\Domaci\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\GUM83FD.tmp
c:\program files (x86)\GUM83FD.tmp\GoogleCrashHandler.exe
c:\program files (x86)\GUM83FD.tmp\GoogleCrashHandler64.exe
c:\program files (x86)\GUM83FD.tmp\GoogleUpdate.exe
c:\program files (x86)\GUM83FD.tmp\GoogleUpdateBroker.exe
c:\program files (x86)\GUM83FD.tmp\GoogleUpdateHelper.msi
c:\program files (x86)\GUM83FD.tmp\GoogleUpdateOnDemand.exe
c:\program files (x86)\GUM83FD.tmp\GoogleUpdateSetup.exe
c:\program files (x86)\GUM83FD.tmp\goopdate.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_am.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ar.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_bg.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_bn.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ca.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_cs.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_da.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_de.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_el.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_en-GB.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_en.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_es-419.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_es.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_et.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_fa.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_fi.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_fil.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_fr.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_gu.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_hi.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_hr.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_hu.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_id.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_is.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_it.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_iw.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ja.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_kn.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ko.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_lt.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_lv.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ml.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_mr.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ms.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_nl.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_no.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_pl.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_pt-BR.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_pt-PT.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ro.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ru.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_sk.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_sl.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_sr.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_sv.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_sw.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ta.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_te.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_th.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_tr.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_uk.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_ur.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_vi.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_zh-CN.dll
c:\program files (x86)\GUM83FD.tmp\goopdateres_zh-TW.dll
c:\program files (x86)\GUM83FD.tmp\npGoogleUpdate3.dll
c:\program files (x86)\GUM83FD.tmp\psmachine.dll
c:\program files (x86)\GUM83FD.tmp\psuser.dll
c:\program files (x86)\GUT83FE.tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-08-28 to 2013-09-29 )))))))))))))))))))))))))))))))
.
.
2013-09-29 19:33 . 2013-09-29 19:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-29 16:33 . 2013-09-29 16:36 -------- d-----w- C:\AdwCleaner
2013-09-29 15:31 . 2013-09-29 17:03 -------- d-----w- c:\program files\trend micro
2013-09-29 08:26 . 2013-09-29 08:26 -------- d-----w- C:\2-click run
2013-09-29 08:26 . 2013-09-29 08:27 -------- d-----w- c:\program files (x86)\Euro truck 2
2013-09-28 18:28 . 2009-07-14 01:14 1397248 ----a-w- c:\windows\SysWow64\win_utilman.exe
2013-09-28 13:54 . 2013-09-28 13:54 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2013-09-28 11:00 . 2013-09-28 11:00 -------- d-----w- c:\users\Public\CyberLink
2013-09-28 10:52 . 2013-09-28 10:52 -------- d-----w- c:\program files (x86)\PAYDAY 2
2013-09-28 10:15 . 2013-09-28 10:15 509952 ----a-w- c:\windows\system32\ntshrui.dll
2013-09-28 10:15 . 2013-09-28 10:15 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2013-09-28 10:15 . 2013-09-28 10:15 14172672 ----a-w- c:\windows\system32\shell32.dll
2013-09-28 10:15 . 2013-09-28 10:15 515584 ----a-w- c:\windows\system32\timedate.cpl
2013-09-28 10:15 . 2013-09-28 10:15 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2013-09-28 10:15 . 2013-09-28 10:15 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2013-09-28 10:15 . 2013-09-28 10:15 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2013-09-28 10:15 . 2013-09-28 10:15 634880 ----a-w- c:\windows\system32\msvcrt.dll
2013-09-28 10:13 . 2013-09-28 10:13 723456 ----a-w- c:\windows\system32\EncDec.dll
2013-09-28 10:13 . 2013-09-28 10:13 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2013-09-28 10:13 . 2013-09-28 10:13 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-09-28 10:13 . 2013-09-28 10:13 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2013-09-28 10:12 . 2013-09-28 10:12 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2013-09-28 10:12 . 2013-09-28 10:12 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2013-09-28 10:12 . 2013-09-28 10:12 75776 ----a-w- c:\windows\SysWow64\psisrndr.ax
2013-09-28 10:12 . 2013-09-28 10:12 613888 ----a-w- c:\windows\system32\psisdecd.dll
2013-09-28 10:12 . 2013-09-28 10:12 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll
2013-09-28 10:12 . 2013-09-28 10:12 108032 ----a-w- c:\windows\system32\psisrndr.ax
2013-09-28 10:12 . 2013-09-28 10:12 861696 ----a-w- c:\windows\system32\oleaut32.dll
2013-09-28 10:12 . 2013-09-28 10:12 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2013-09-28 10:12 . 2013-09-28 10:12 331776 ----a-w- c:\windows\system32\oleacc.dll
2013-09-28 10:12 . 2013-09-28 10:12 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2013-09-28 10:06 . 2013-09-28 10:06 199680 ----a-w- c:\windows\system32\xmllite.dll
2013-09-28 10:04 . 2013-09-28 10:04 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2013-09-28 10:03 . 2013-09-28 10:03 -------- d-----w- c:\windows\SysWow64\Wat
2013-09-28 10:03 . 2013-09-28 10:03 -------- d-----w- c:\windows\system32\Wat
2013-09-28 10:01 . 2013-09-29 16:34 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2012
2013-09-28 10:01 . 2013-09-28 10:02 -------- d-----w- c:\programdata\TuneUp Software
2013-09-28 10:01 . 2013-09-28 10:01 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-09-28 10:01 . 2013-09-28 10:01 -------- d--h--w- c:\programdata\Common Files
2013-09-28 09:46 . 2013-09-28 09:47 -------- d-----w- c:\programdata\IObit
2013-09-28 09:44 . 2013-09-28 09:46 -------- d-----w- c:\program files (x86)\IObit
2013-09-28 09:36 . 2013-09-28 09:36 -------- d-----w- c:\program files\CCleaner
2013-09-28 09:31 . 2013-09-28 09:31 -------- d-----w- c:\program files\7-Zip
2013-09-28 09:17 . 2013-09-28 09:17 -------- d-----w- c:\program files\ESET
2013-09-28 08:47 . 2013-09-15 22:50 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5AB88AD6-E033-4582-A426-A506639F8D1D}\mpengine.dll
2013-09-28 05:35 . 2013-09-28 05:36 -------- d-----w- c:\programdata\Recovery
2013-09-27 19:59 . 2013-09-12 08:58 9281032 ----a-w- c:\windows\system32\nvcuda.dll
2013-09-27 19:52 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-09-27 19:52 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-09-27 19:52 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-09-27 19:52 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-09-27 19:49 . 2013-09-27 20:01 -------- d-----w- c:\program files (x86)\Google
2013-09-27 19:47 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-09-27 19:47 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-09-27 19:47 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-09-27 19:47 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-09-27 19:47 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-09-27 19:47 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-09-27 19:47 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-09-27 19:47 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-09-27 19:47 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-09-27 19:43 . 2013-09-27 19:43 -------- d-----w- c:\users\Public\Symantec
2013-09-27 19:42 . 2013-09-27 19:48 -------- d-----w- c:\users\Domaci
2013-09-11 23:17 . 2013-09-11 23:17 571168 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-28 10:14 . 2013-09-28 10:14 340992 ----a-w- c:\windows\system32\schannel.dll
2013-09-28 10:14 . 2013-09-28 10:14 224768 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-27 19:53 . 2010-06-24 18:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-08-07 02:22 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\users\Domaci\AppData\Roaming\uTorrent\uTorrent.exe" [2013-09-28 1043536]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-02-10 61112]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-27 20:01 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-08-27 1028896]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 4035152]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.20
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
------------------------ Other Running Processes ------------------------
.
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
.
**************************************************************************
.
Completion time: 2013-09-29 21:36:22 - machine was rebooted
ComboFix-quarantined-files.txt 2013-09-29 19:36
ComboFix2.txt 2013-09-29 18:42
.
Pre-Run: 920 570 023 936 bytes free
Post-Run: 920 236 810 240 bytes free
.
- - End Of File - - F20D2FA6B14E3C8952C83C108BAA5790