VIRY.CZ

Vyuzitie ram je stale nad 75%. Neviem ci je to normalne na netbooky, vcera som precisil cez ccleaner, a kontrola Malwarebytes

----

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivanka at 2013-11-19 20:12:27
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 72 GB (70%) free of 102 GB
Total RAM: 1014 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:12:54, on 19. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Asus\Eee Docking\Eee Docking.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Ivanka\Downloads\RSIT.exe
C:\Program Files\trend micro\Ivanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
O4 - HKLM\..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
O4 - HKLM\..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none"
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 8732 bytes

======Scheduled tasks folder======

C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 185680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-09 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}]
Windows 7 Starter Helper - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll [2009-12-09 137904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-09 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 548744]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe []
"LiveUpdate"=AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []
"CapsHook"=AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2011-01-06 414384]
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 112632]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 218448]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-03-24 45448]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-24 9722472]
"ASUSPRP"=C:\Program Files\ASUS\APRP\APRP.EXE [2011-04-30 2018032]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"ASUSWebStorage"=C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-04-19 142104]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-04-19 174360]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-04-19 150808]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-13 116648]
"Facebook Update"=C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-07 138096]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-10-21 20549280]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\SYSTEM32\igfxdev.dll [2011-04-11 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-19 20:12:27 ----D---- C:\rsit
2013-11-18 22:53:05 ----A---- C:\windows\system32\drivers\mbamswissarmy.sys
2013-11-18 22:39:47 ----SHD---- C:\Config.Msi
2013-11-18 21:43:32 ----A---- C:\windows\system32\jscript.dll
2013-11-18 21:43:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-18 21:43:28 ----A---- C:\windows\system32\jsproxy.dll
2013-11-18 21:43:27 ----A---- C:\windows\system32\iesetup.dll
2013-11-18 21:43:26 ----A---- C:\windows\system32\ieui.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\msfeeds.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\iernonce.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-18 21:43:22 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-18 21:43:21 ----A---- C:\windows\system32\urlmon.dll
2013-11-18 21:43:21 ----A---- C:\windows\system32\iesysprep.dll
2013-11-18 21:43:18 ----A---- C:\windows\system32\iertutil.dll
2013-11-18 21:43:14 ----A---- C:\windows\system32\wininet.dll
2013-11-18 21:43:09 ----A---- C:\windows\system32\ieframe.dll
2013-11-18 21:43:04 ----A---- C:\windows\system32\mshtml.dll
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 21:35:21 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-18 21:35:19 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-18 21:35:18 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-18 17:47:35 ----A---- C:\windows\system32\comctl32.dll
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-18 17:47:30 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-18 17:47:29 ----A---- C:\windows\system32\mswsock.dll
2013-11-18 17:47:29 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-18 17:47:20 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\credui.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\authui.dll
2013-11-18 17:46:56 ----A---- C:\windows\system32\schannel.dll
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-18 17:46:54 ----A---- C:\windows\system32\lsasrv.dll
2013-11-18 17:46:54 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-18 17:46:53 ----A---- C:\windows\system32\sspicli.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\ncrypt.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\lsass.exe
2013-11-18 17:46:52 ----A---- C:\windows\system32\sspisrv.dll
2013-11-18 17:46:52 ----A---- C:\windows\system32\secur32.dll
2013-11-18 17:46:31 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-18 17:46:28 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-11-18 17:46:27 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-18 17:46:26 ----A---- C:\windows\system32\tdh.dll
2013-11-18 17:46:26 ----A---- C:\windows\system32\ntdll.dll
2013-11-18 17:46:25 ----A---- C:\windows\system32\advapi32.dll
2013-11-18 17:46:20 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\lpk.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\dciman32.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\atmfd.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\fontsub.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\atmlib.dll
2013-11-18 17:46:11 ----A---- C:\windows\system32\scavengeui.dll
2013-11-18 17:45:51 ----A---- C:\windows\system32\win32k.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\WebClnt.dll
2013-11-18 17:45:30 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\davclnt.dll
2013-11-18 17:45:28 ----A---- C:\windows\system32\gdi32.dll
2013-11-18 17:45:25 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-18 17:45:24 ----A---- C:\windows\system32\nshwfp.dll
2013-11-18 17:45:24 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-18 17:45:09 ----A---- C:\windows\system32\crypt32.dll
2013-11-18 17:40:33 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-18 17:40:32 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-18 17:40:29 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-18 17:29:37 ----D---- C:\Users\Ivanka\AppData\Roaming\Malwarebytes
2013-11-18 17:28:50 ----D---- C:\ProgramData\Malwarebytes
2013-11-18 17:28:36 ----A---- C:\windows\system32\drivers\mbam.sys
2013-11-18 17:28:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-10-30 14:49:34 ----A---- C:\windows\system32\shell32.dll
2013-10-30 14:49:26 ----A---- C:\windows\system32\shdocvw.dll
2013-10-30 14:48:19 ----A---- C:\windows\system32\drivers\ataport.sys
2013-10-30 14:47:43 ----A---- C:\windows\system32\kernel32.dll
2013-10-30 14:47:42 ----A---- C:\windows\system32\KernelBase.dll
2013-10-30 14:47:41 ----A---- C:\windows\system32\winsrv.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-30 14:47:36 ----A---- C:\windows\system32\conhost.exe
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-30 14:47:28 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-30 14:47:25 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-30 14:47:18 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

======List of files/folders modified in the last 1 month======

2013-11-19 20:12:53 ----D---- C:\Program Files\Trend Micro
2013-11-19 20:12:44 ----D---- C:\windows\Prefetch
2013-11-19 20:09:40 ----D---- C:\windows\Temp
2013-11-19 20:06:20 ----D---- C:\Users\Ivanka\AppData\Roaming\Skype
2013-11-19 04:11:31 ----D---- C:\windows\system32\config
2013-11-19 03:24:19 ----D---- C:\windows\winsxs
2013-11-19 03:21:09 ----D---- C:\windows\system32\DriverStore
2013-11-19 03:21:08 ----AD---- C:\windows\system32\drivers
2013-11-19 03:20:17 ----D---- C:\windows\System32
2013-11-19 03:02:55 ----D---- C:\windows\system32\catroot
2013-11-19 03:01:47 ----D---- C:\windows\Logs
2013-11-19 03:01:37 ----D---- C:\Windows
2013-11-19 03:00:59 ----SHD---- C:\System Volume Information
2013-11-19 01:41:39 ----D---- C:\windows\rescache
2013-11-18 23:16:17 ----D---- C:\windows\Microsoft.NET
2013-11-18 23:14:56 ----RSD---- C:\windows\assembly
2013-11-18 22:55:23 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-11-18 22:55:22 ----D---- C:\windows\inf
2013-11-18 22:48:43 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 22:46:40 ----D---- C:\windows\system32\sk-SK
2013-11-18 22:46:39 ----D---- C:\windows\system32\en-US
2013-11-18 22:46:32 ----D---- C:\Program Files\Internet Explorer
2013-11-18 22:40:27 ----SHD---- C:\windows\Installer
2013-11-18 22:40:13 ----D---- C:\Program Files\Microsoft Application Virtualization Client
2013-11-18 22:38:13 ----D---- C:\ProgramData\Microsoft Help
2013-11-18 22:29:02 ----D---- C:\Program Files\Microsoft Security Client
2013-11-18 21:44:06 ----D---- C:\windows\system32\catroot2
2013-11-18 21:42:59 ----D---- C:\windows\system32\MRT
2013-11-18 17:28:50 ----HD---- C:\ProgramData
2013-11-18 17:28:35 ----RD---- C:\Program Files
2013-11-17 19:05:46 ----D---- C:\windows\panther
2013-11-17 18:58:54 ----D---- C:\Program Files\Windows Defender
2013-11-17 18:58:51 ----D---- C:\windows\PolicyDefinitions
2013-11-17 18:58:50 ----D---- C:\windows\system32\pl-PL
2013-11-17 18:58:50 ----D---- C:\windows\system32\hu-HU
2013-11-17 18:58:49 ----D---- C:\windows\system32\wbem
2013-11-17 18:58:49 ----D---- C:\windows\system32\migration
2013-11-17 18:58:49 ----D---- C:\windows\system32\cs-CZ
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-PT
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-BR
2013-11-17 18:58:39 ----D---- C:\windows\system32\ko-KR
2013-11-17 18:58:39 ----D---- C:\windows\system32\it-IT
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-TW
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-HK
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-CN
2013-11-17 18:58:38 ----D---- C:\windows\system32\tr-TR
2013-11-17 18:58:38 ----D---- C:\windows\system32\sv-SE
2013-11-17 18:58:38 ----D---- C:\windows\system32\nl-NL
2013-11-17 18:58:38 ----D---- C:\windows\system32\fr-FR
2013-11-17 18:58:38 ----D---- C:\windows\system32\fi-FI
2013-11-17 18:58:38 ----D---- C:\windows\system32\es-ES
2013-11-17 18:58:38 ----D---- C:\windows\system32\el-GR
2013-11-17 18:58:38 ----D---- C:\windows\system32\de-DE
2013-11-17 18:58:37 ----D---- C:\windows\system32\ru-RU
2013-11-17 18:58:37 ----D---- C:\windows\system32\nb-NO
2013-11-17 18:58:37 ----D---- C:\windows\system32\ja-JP
2013-11-17 18:58:37 ----D---- C:\windows\system32\da-DK
2013-11-17 18:35:14 ----D---- C:\Program Files\Adobe
2013-11-17 18:26:37 ----D---- C:\Program Files\Guitar Pro 5
2013-11-17 18:11:53 ----D---- C:\ProgramData\Skype
2013-11-17 18:11:35 ----RD---- C:\Program Files\Skype
2013-11-07 15:50:18 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\windows\system32\drivers\AsIO.sys [2010-06-28 11456]
R1 AsUpIO;AsUpIO; C:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 80464]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 189520]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 64080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 92112]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-04-11 4815872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-08-24 3178472]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-09-27 68208]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys []
S3 btwrchid;btwrchid; C:\windows\system32\drivers\btwrchid.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\mbamswissarmy.sys [2013-11-18 40776]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-22 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsusService;Asus Launcher Service; C:\windows\system32\AsusService.exe [2011-03-04 224680]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 161104]
R2 VideAceWindowsService;VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [2011-01-13 91464]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 196320]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 51040]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Po cleane reboot request, po boote sa spustilo toto

----

# AdwCleaner v3.012 - Report created 19/11/2013 at 21:07:17
# Updated 11/11/2013 by Xplode
# Operating System : Windows 7 Starter Service Pack 1 (32 bits)
# Username : Ivanka - IVANKA-PC
# Running from : C:\Users\Ivanka\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\SweetIM
Folder Deleted : C:\Users\Ivanka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736


-\\ Google Chrome v

[ File : C:\Users\Ivanka\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2348 octets] - [19/11/2013 21:04:29]
AdwCleaner[S0].txt - [2309 octets] - [19/11/2013 21:07:17]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2369 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivanka at 2013-11-19 21:37:30
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 72 GB (70%) free of 102 GB
Total RAM: 1014 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:38:48, on 19. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files\Asus\Eee Docking\Eee Docking.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Asus\APRP\aprp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Users\Ivanka\Desktop\RSIT.exe
C:\Program Files\trend micro\Ivanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
O4 - HKLM\..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
O4 - HKLM\..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none"
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 8628 bytes

======Scheduled tasks folder======

C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 185680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-09 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}]
Windows 7 Starter Helper - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll [2009-12-09 137904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-09 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 548744]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe []
"LiveUpdate"=AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []
"CapsHook"=AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2011-01-06 414384]
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 112632]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 218448]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-03-24 45448]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-24 9722472]
"ASUSPRP"=C:\Program Files\ASUS\APRP\APRP.EXE [2011-04-30 2018032]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"ASUSWebStorage"=C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-04-19 142104]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-04-19 174360]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-04-19 150808]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-13 116648]
"Facebook Update"=C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-07 138096]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-10-21 20549280]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\SYSTEM32\igfxdev.dll [2011-04-11 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-19 21:04:23 ----D---- C:\AdwCleaner
2013-11-19 20:12:27 ----D---- C:\rsit
2013-11-18 22:53:05 ----A---- C:\windows\system32\drivers\mbamswissarmy.sys
2013-11-18 22:39:47 ----SHD---- C:\Config.Msi
2013-11-18 21:43:32 ----A---- C:\windows\system32\jscript.dll
2013-11-18 21:43:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-18 21:43:28 ----A---- C:\windows\system32\jsproxy.dll
2013-11-18 21:43:27 ----A---- C:\windows\system32\iesetup.dll
2013-11-18 21:43:26 ----A---- C:\windows\system32\ieui.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\msfeeds.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\iernonce.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-18 21:43:22 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-18 21:43:21 ----A---- C:\windows\system32\urlmon.dll
2013-11-18 21:43:21 ----A---- C:\windows\system32\iesysprep.dll
2013-11-18 21:43:18 ----A---- C:\windows\system32\iertutil.dll
2013-11-18 21:43:14 ----A---- C:\windows\system32\wininet.dll
2013-11-18 21:43:09 ----A---- C:\windows\system32\ieframe.dll
2013-11-18 21:43:04 ----A---- C:\windows\system32\mshtml.dll
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 21:35:21 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-18 21:35:19 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-18 21:35:18 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-18 17:47:35 ----A---- C:\windows\system32\comctl32.dll
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-18 17:47:30 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-18 17:47:29 ----A---- C:\windows\system32\mswsock.dll
2013-11-18 17:47:29 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-18 17:47:20 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\credui.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\authui.dll
2013-11-18 17:46:56 ----A---- C:\windows\system32\schannel.dll
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-18 17:46:54 ----A---- C:\windows\system32\lsasrv.dll
2013-11-18 17:46:54 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-18 17:46:53 ----A---- C:\windows\system32\sspicli.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\ncrypt.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\lsass.exe
2013-11-18 17:46:52 ----A---- C:\windows\system32\sspisrv.dll
2013-11-18 17:46:52 ----A---- C:\windows\system32\secur32.dll
2013-11-18 17:46:31 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-18 17:46:28 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-11-18 17:46:27 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-18 17:46:26 ----A---- C:\windows\system32\tdh.dll
2013-11-18 17:46:26 ----A---- C:\windows\system32\ntdll.dll
2013-11-18 17:46:25 ----A---- C:\windows\system32\advapi32.dll
2013-11-18 17:46:20 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\lpk.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\dciman32.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\atmfd.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\fontsub.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\atmlib.dll
2013-11-18 17:46:11 ----A---- C:\windows\system32\scavengeui.dll
2013-11-18 17:45:51 ----A---- C:\windows\system32\win32k.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\WebClnt.dll
2013-11-18 17:45:30 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\davclnt.dll
2013-11-18 17:45:28 ----A---- C:\windows\system32\gdi32.dll
2013-11-18 17:45:25 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-18 17:45:24 ----A---- C:\windows\system32\nshwfp.dll
2013-11-18 17:45:24 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-18 17:45:09 ----A---- C:\windows\system32\crypt32.dll
2013-11-18 17:40:33 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-18 17:40:32 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-18 17:40:29 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-18 17:29:37 ----D---- C:\Users\Ivanka\AppData\Roaming\Malwarebytes
2013-11-18 17:28:50 ----D---- C:\ProgramData\Malwarebytes
2013-11-18 17:28:36 ----A---- C:\windows\system32\drivers\mbam.sys
2013-11-18 17:28:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-10-30 14:49:34 ----A---- C:\windows\system32\shell32.dll
2013-10-30 14:49:26 ----A---- C:\windows\system32\shdocvw.dll
2013-10-30 14:48:19 ----A---- C:\windows\system32\drivers\ataport.sys
2013-10-30 14:47:43 ----A---- C:\windows\system32\kernel32.dll
2013-10-30 14:47:42 ----A---- C:\windows\system32\KernelBase.dll
2013-10-30 14:47:41 ----A---- C:\windows\system32\winsrv.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-30 14:47:36 ----A---- C:\windows\system32\conhost.exe
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-30 14:47:28 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-30 14:47:25 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-30 14:47:18 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

======List of files/folders modified in the last 1 month======

2013-11-19 21:37:40 ----D---- C:\windows\Temp
2013-11-19 21:37:34 ----D---- C:\Program Files\Trend Micro
2013-11-19 21:37:28 ----D---- C:\windows\Prefetch
2013-11-19 21:27:10 ----D---- C:\windows\system32\config
2013-11-19 21:18:08 ----D---- C:\Users\Ivanka\AppData\Roaming\Skype
2013-11-19 21:07:18 ----RD---- C:\Program Files
2013-11-19 11:21:30 ----N---- C:\windows\system32\MpSigStub.exe
2013-11-19 03:24:19 ----D---- C:\windows\winsxs
2013-11-19 03:21:09 ----D---- C:\windows\system32\DriverStore
2013-11-19 03:21:08 ----AD---- C:\windows\system32\drivers
2013-11-19 03:20:17 ----D---- C:\windows\System32
2013-11-19 03:02:55 ----D---- C:\windows\system32\catroot
2013-11-19 03:01:47 ----D---- C:\windows\Logs
2013-11-19 03:01:37 ----D---- C:\Windows
2013-11-19 03:00:59 ----SHD---- C:\System Volume Information
2013-11-19 01:41:39 ----D---- C:\windows\rescache
2013-11-18 23:16:17 ----D---- C:\windows\Microsoft.NET
2013-11-18 23:14:56 ----RSD---- C:\windows\assembly
2013-11-18 22:55:23 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-11-18 22:55:22 ----D---- C:\windows\inf
2013-11-18 22:48:43 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 22:46:40 ----D---- C:\windows\system32\sk-SK
2013-11-18 22:46:39 ----D---- C:\windows\system32\en-US
2013-11-18 22:46:32 ----D---- C:\Program Files\Internet Explorer
2013-11-18 22:40:27 ----SHD---- C:\windows\Installer
2013-11-18 22:40:13 ----D---- C:\Program Files\Microsoft Application Virtualization Client
2013-11-18 22:38:13 ----D---- C:\ProgramData\Microsoft Help
2013-11-18 22:29:02 ----D---- C:\Program Files\Microsoft Security Client
2013-11-18 21:44:06 ----D---- C:\windows\system32\catroot2
2013-11-18 21:42:59 ----D---- C:\windows\system32\MRT
2013-11-18 17:28:50 ----HD---- C:\ProgramData
2013-11-17 19:05:46 ----D---- C:\windows\panther
2013-11-17 18:58:54 ----D---- C:\Program Files\Windows Defender
2013-11-17 18:58:51 ----D---- C:\windows\PolicyDefinitions
2013-11-17 18:58:50 ----D---- C:\windows\system32\pl-PL
2013-11-17 18:58:50 ----D---- C:\windows\system32\hu-HU
2013-11-17 18:58:49 ----D---- C:\windows\system32\wbem
2013-11-17 18:58:49 ----D---- C:\windows\system32\migration
2013-11-17 18:58:49 ----D---- C:\windows\system32\cs-CZ
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-PT
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-BR
2013-11-17 18:58:39 ----D---- C:\windows\system32\ko-KR
2013-11-17 18:58:39 ----D---- C:\windows\system32\it-IT
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-TW
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-HK
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-CN
2013-11-17 18:58:38 ----D---- C:\windows\system32\tr-TR
2013-11-17 18:58:38 ----D---- C:\windows\system32\sv-SE
2013-11-17 18:58:38 ----D---- C:\windows\system32\nl-NL
2013-11-17 18:58:38 ----D---- C:\windows\system32\fr-FR
2013-11-17 18:58:38 ----D---- C:\windows\system32\fi-FI
2013-11-17 18:58:38 ----D---- C:\windows\system32\es-ES
2013-11-17 18:58:38 ----D---- C:\windows\system32\el-GR
2013-11-17 18:58:38 ----D---- C:\windows\system32\de-DE
2013-11-17 18:58:37 ----D---- C:\windows\system32\ru-RU
2013-11-17 18:58:37 ----D---- C:\windows\system32\nb-NO
2013-11-17 18:58:37 ----D---- C:\windows\system32\ja-JP
2013-11-17 18:58:37 ----D---- C:\windows\system32\da-DK
2013-11-17 18:35:14 ----D---- C:\Program Files\Adobe
2013-11-17 18:26:37 ----D---- C:\Program Files\Guitar Pro 5
2013-11-17 18:11:53 ----D---- C:\ProgramData\Skype
2013-11-17 18:11:35 ----RD---- C:\Program Files\Skype
2013-11-07 15:50:18 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\windows\system32\drivers\AsIO.sys [2010-06-28 11456]
R1 AsUpIO;AsUpIO; C:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 80464]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 189520]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 64080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 92112]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-04-11 4815872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-08-24 3178472]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-09-27 68208]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys []
S3 btwrchid;btwrchid; C:\windows\system32\drivers\btwrchid.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\mbamswissarmy.sys [2013-11-18 40776]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-22 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsusService;Asus Launcher Service; C:\windows\system32\AsusService.exe [2011-03-04 224680]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 161104]
R2 VideAceWindowsService;VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [2011-01-13 91464]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 196320]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 51040]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\Microsoft\BingBar
C:\Program Files\Oceanis\SystemSetting
C:\Users\Ivanka\AppData\Local\Facebook\Update
C:\Program Files\Skype\Toolbars
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-

:services
SeaPort
BBSvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivanka at 2013-11-19 22:10:50
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 72 GB (70%) free of 102 GB
Total RAM: 1014 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:11:58, on 19. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.exe
C:\windows\system32\taskeng.exe
C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Asus\Eee Docking\Eee Docking.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Asus\APRP\aprp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Ivanka\Desktop\RSIT.exe
C:\Program Files\trend micro\Ivanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF"
O4 - HKLM\..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
O4 - HKLM\..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none"
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 8726 bytes

======Scheduled tasks folder======

C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1814705098-1314941069-1158305909-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 185680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-09 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D381FF29-7CFB-4D4E-B92A-C4EDDC696614}]
Windows 7 Starter Helper - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll [2009-12-09 137904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-09 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 548744]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe []
"LiveUpdate"=AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []
"CapsHook"=AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2011-01-06 414384]
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 112632]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 218448]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-03-24 45448]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-24 9722472]
"ASUSPRP"=C:\Program Files\ASUS\APRP\APRP.EXE [2011-04-30 2018032]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"ASUSWebStorage"=C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-04-19 142104]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-04-19 174360]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-04-19 150808]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Ivanka\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-13 116648]
"Facebook Update"=C:\Users\Ivanka\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-12-07 138096]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-10-21 20549280]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\SYSTEM32\igfxdev.dll [2011-04-11 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-19 22:06:10 ----D---- C:\_OTM
2013-11-19 21:04:23 ----D---- C:\AdwCleaner
2013-11-19 20:12:27 ----D---- C:\rsit
2013-11-18 22:53:05 ----A---- C:\windows\system32\drivers\mbamswissarmy.sys
2013-11-18 22:39:47 ----SHD---- C:\Config.Msi
2013-11-18 21:43:32 ----A---- C:\windows\system32\jscript.dll
2013-11-18 21:43:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-18 21:43:28 ----A---- C:\windows\system32\jsproxy.dll
2013-11-18 21:43:27 ----A---- C:\windows\system32\iesetup.dll
2013-11-18 21:43:26 ----A---- C:\windows\system32\ieui.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\msfeeds.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\iernonce.dll
2013-11-18 21:43:23 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-18 21:43:22 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-18 21:43:21 ----A---- C:\windows\system32\urlmon.dll
2013-11-18 21:43:21 ----A---- C:\windows\system32\iesysprep.dll
2013-11-18 21:43:18 ----A---- C:\windows\system32\iertutil.dll
2013-11-18 21:43:14 ----A---- C:\windows\system32\wininet.dll
2013-11-18 21:43:09 ----A---- C:\windows\system32\ieframe.dll
2013-11-18 21:43:04 ----A---- C:\windows\system32\mshtml.dll
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-18 21:35:22 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 21:35:21 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-18 21:35:20 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-18 21:35:19 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-18 21:35:18 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-18 17:47:35 ----A---- C:\windows\system32\comctl32.dll
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-18 17:47:33 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-18 17:47:30 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-18 17:47:29 ----A---- C:\windows\system32\mswsock.dll
2013-11-18 17:47:29 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-18 17:47:20 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\credui.dll
2013-11-18 17:47:20 ----A---- C:\windows\system32\authui.dll
2013-11-18 17:46:56 ----A---- C:\windows\system32\schannel.dll
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-18 17:46:55 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-18 17:46:54 ----A---- C:\windows\system32\lsasrv.dll
2013-11-18 17:46:54 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-18 17:46:53 ----A---- C:\windows\system32\sspicli.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\ncrypt.dll
2013-11-18 17:46:53 ----A---- C:\windows\system32\lsass.exe
2013-11-18 17:46:52 ----A---- C:\windows\system32\sspisrv.dll
2013-11-18 17:46:52 ----A---- C:\windows\system32\secur32.dll
2013-11-18 17:46:31 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-18 17:46:28 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-11-18 17:46:27 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-18 17:46:26 ----A---- C:\windows\system32\tdh.dll
2013-11-18 17:46:26 ----A---- C:\windows\system32\ntdll.dll
2013-11-18 17:46:25 ----A---- C:\windows\system32\advapi32.dll
2013-11-18 17:46:20 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\lpk.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\dciman32.dll
2013-11-18 17:46:18 ----A---- C:\windows\system32\atmfd.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\fontsub.dll
2013-11-18 17:46:17 ----A---- C:\windows\system32\atmlib.dll
2013-11-18 17:46:11 ----A---- C:\windows\system32\scavengeui.dll
2013-11-18 17:45:51 ----A---- C:\windows\system32\win32k.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\WebClnt.dll
2013-11-18 17:45:30 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-18 17:45:30 ----A---- C:\windows\system32\davclnt.dll
2013-11-18 17:45:28 ----A---- C:\windows\system32\gdi32.dll
2013-11-18 17:45:25 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-18 17:45:24 ----A---- C:\windows\system32\nshwfp.dll
2013-11-18 17:45:24 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-18 17:45:09 ----A---- C:\windows\system32\crypt32.dll
2013-11-18 17:40:33 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-18 17:40:32 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-18 17:40:29 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-18 17:29:37 ----D---- C:\Users\Ivanka\AppData\Roaming\Malwarebytes
2013-11-18 17:28:50 ----D---- C:\ProgramData\Malwarebytes
2013-11-18 17:28:36 ----A---- C:\windows\system32\drivers\mbam.sys
2013-11-18 17:28:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-10-30 14:49:34 ----A---- C:\windows\system32\shell32.dll
2013-10-30 14:49:26 ----A---- C:\windows\system32\shdocvw.dll
2013-10-30 14:48:19 ----A---- C:\windows\system32\drivers\ataport.sys
2013-10-30 14:47:43 ----A---- C:\windows\system32\kernel32.dll
2013-10-30 14:47:42 ----A---- C:\windows\system32\KernelBase.dll
2013-10-30 14:47:41 ----A---- C:\windows\system32\winsrv.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-30 14:47:36 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-30 14:47:36 ----A---- C:\windows\system32\conhost.exe
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-30 14:47:35 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-30 14:47:34 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-30 14:47:33 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-30 14:47:32 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-30 14:47:31 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-30 14:47:30 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-30 14:47:29 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-30 14:47:28 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-30 14:47:27 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-30 14:47:25 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-30 14:47:18 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

======List of files/folders modified in the last 1 month======

2013-11-19 22:10:58 ----D---- C:\Program Files\Trend Micro
2013-11-19 22:09:58 ----D---- C:\windows\Prefetch
2013-11-19 22:09:57 ----D---- C:\windows\Temp
2013-11-19 22:09:06 ----D---- C:\windows\system32\config
2013-11-19 22:08:57 ----D---- C:\Users\Ivanka\AppData\Roaming\Skype
2013-11-19 21:07:18 ----RD---- C:\Program Files
2013-11-19 11:21:30 ----N---- C:\windows\system32\MpSigStub.exe
2013-11-19 03:24:19 ----D---- C:\windows\winsxs
2013-11-19 03:21:09 ----D---- C:\windows\system32\DriverStore
2013-11-19 03:21:08 ----AD---- C:\windows\system32\drivers
2013-11-19 03:20:17 ----D---- C:\windows\System32
2013-11-19 03:02:55 ----D---- C:\windows\system32\catroot
2013-11-19 03:01:47 ----D---- C:\windows\Logs
2013-11-19 03:01:37 ----D---- C:\Windows
2013-11-19 03:00:59 ----SHD---- C:\System Volume Information
2013-11-19 01:41:39 ----D---- C:\windows\rescache
2013-11-18 23:16:17 ----D---- C:\windows\Microsoft.NET
2013-11-18 23:14:56 ----RSD---- C:\windows\assembly
2013-11-18 22:55:23 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-11-18 22:55:22 ----D---- C:\windows\inf
2013-11-18 22:48:43 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 22:46:40 ----D---- C:\windows\system32\sk-SK
2013-11-18 22:46:39 ----D---- C:\windows\system32\en-US
2013-11-18 22:46:32 ----D---- C:\Program Files\Internet Explorer
2013-11-18 22:40:27 ----SHD---- C:\windows\Installer
2013-11-18 22:40:13 ----D---- C:\Program Files\Microsoft Application Virtualization Client
2013-11-18 22:38:13 ----D---- C:\ProgramData\Microsoft Help
2013-11-18 22:29:02 ----D---- C:\Program Files\Microsoft Security Client
2013-11-18 21:44:06 ----D---- C:\windows\system32\catroot2
2013-11-18 21:42:59 ----D---- C:\windows\system32\MRT
2013-11-18 17:28:50 ----HD---- C:\ProgramData
2013-11-17 19:05:46 ----D---- C:\windows\panther
2013-11-17 18:58:54 ----D---- C:\Program Files\Windows Defender
2013-11-17 18:58:51 ----D---- C:\windows\PolicyDefinitions
2013-11-17 18:58:50 ----D---- C:\windows\system32\pl-PL
2013-11-17 18:58:50 ----D---- C:\windows\system32\hu-HU
2013-11-17 18:58:49 ----D---- C:\windows\system32\wbem
2013-11-17 18:58:49 ----D---- C:\windows\system32\migration
2013-11-17 18:58:49 ----D---- C:\windows\system32\cs-CZ
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-PT
2013-11-17 18:58:39 ----D---- C:\windows\system32\pt-BR
2013-11-17 18:58:39 ----D---- C:\windows\system32\ko-KR
2013-11-17 18:58:39 ----D---- C:\windows\system32\it-IT
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-TW
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-HK
2013-11-17 18:58:38 ----D---- C:\windows\system32\zh-CN
2013-11-17 18:58:38 ----D---- C:\windows\system32\tr-TR
2013-11-17 18:58:38 ----D---- C:\windows\system32\sv-SE
2013-11-17 18:58:38 ----D---- C:\windows\system32\nl-NL
2013-11-17 18:58:38 ----D---- C:\windows\system32\fr-FR
2013-11-17 18:58:38 ----D---- C:\windows\system32\fi-FI
2013-11-17 18:58:38 ----D---- C:\windows\system32\es-ES
2013-11-17 18:58:38 ----D---- C:\windows\system32\el-GR
2013-11-17 18:58:38 ----D---- C:\windows\system32\de-DE
2013-11-17 18:58:37 ----D---- C:\windows\system32\ru-RU
2013-11-17 18:58:37 ----D---- C:\windows\system32\nb-NO
2013-11-17 18:58:37 ----D---- C:\windows\system32\ja-JP
2013-11-17 18:58:37 ----D---- C:\windows\system32\da-DK
2013-11-17 18:35:14 ----D---- C:\Program Files\Adobe
2013-11-17 18:26:37 ----D---- C:\Program Files\Guitar Pro 5
2013-11-17 18:11:53 ----D---- C:\ProgramData\Skype
2013-11-17 18:11:35 ----RD---- C:\Program Files\Skype
2013-11-07 15:50:18 ----A---- C:\windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 AsIO;AsIO; C:\windows\system32\drivers\AsIO.sys [2010-06-28 11456]
R1 AsUpIO;AsUpIO; C:\windows\system32\drivers\AsUpIO.sys [2010-08-03 11832]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 80464]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 189520]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 64080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 92112]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-04-13 109960]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2011-04-11 4815872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-08-24 3178472]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 13880]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2010-09-27 68208]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys []
S3 btwrchid;btwrchid; C:\windows\system32\drivers\btwrchid.sys []
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\mbamswissarmy.sys [2013-11-18 40776]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-22 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsusService;Asus Launcher Service; C:\windows\system32\AsusService.exe [2011-03-04 224680]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 161104]
R2 VideAceWindowsService;VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [2011-01-13 91464]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 196320]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-22 116648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 51040]

-----------------EOF-----------------

OTM nemazal. Spusťte znovu se stejným skriptem a před skenem vypněte antivir.