Prosím o kontrolu
Napsal: 04 led 2014 12:35
Dobrý den,
Jelikož jste mi zde hodně pomohli, prosím o kontrolu logu manželky PC, PC je také hodně pomalé, videa se sekají, když je spuštěná nějaká náročnější aplikace tak se to vše seká, mockrát vám děkuji za pomoc, zde log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Michaela at 2014-01-04 12:25:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 9 GB (3%) free of 290 GB
Total RAM: 4056 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:25:11, on 4.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe
C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Users\Michaela\AppData\Local\CloudStation\bin\client-win.exe
C:\Program Files\trend micro\Michaela.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Data Replicator 3] "C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe" /MIN
O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Michaela\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: CloudStation.lnk = AppData\Local\CloudStation\bin\cloud.exe
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Přidat do součásti Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: Virtuální klávesnice - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxeaCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe
O23 - Service: lxea_device - - C:\Windows\system32\lxeacoms.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynoDrService - Unknown owner - C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12514 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
"C:\Program Files\Tablet\Pen\Pen_TouchService.exe"
/QuitInfo:0000000000000248;000000000000024C; /AddRef;
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 1561168
\??\C:\Windows\system32\conhost.exe "756613821-115650329214134583322044938549-142716093362106635-814512625530449023
C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe" -r
C:\Windows\system32\lxeacoms.exe -service
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe"
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2224
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
/QuitInfo:00000000000006E4;00000000000006C8; /AddRef;
/QuitInfo:0000000000000654;0000000000000704;
"C:\Program Files\Tablet\Pen\Pen_TouchUser.exe"
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Tablet\Pen\Pen_TabletUser.exe"
/loadhooks /Parent:0000000000000BB8
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-512685d9-2fb2-491e-a85a-bd50d97502ad -SystemEventPortName:HostProcess-09e483ea-d56b-4d08-bb30-b9d919079bd5 -IoCancelEventPortName:HostProcess-6bc11863-ea4f-4083-b917-fe07e7be5829 -NonStateChangingEventPortName:HostProcess-7d34c6b2-5688-4aba-b8f8-d3c470fb16b1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2539c43c-acd6-4bba-8512-7a4928342643 -DeviceGroupId:WpdFsGroup
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe" au
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe"
"C:\Program Files\OO Software\Defrag\oodtray.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe" /MIN
"C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe"
"C:\Program Files\DellTPad\HidFind.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "2074434750-375227808-500308617-1404087506-899064028-71349465318736861-360007034
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
C:\Users\Michaela\AppData\Local\CloudStation\bin\..\bin\client-win.exe C:/Users/Michaela/AppData/Local/CloudStation/bin/../config/client.conf 1024
\??\C:\Windows\system32\conhost.exe "-924699327329281005-91255858819410529441419915861-112367456-1394364103-836994647
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Users\Michaela\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey B4F45281-094B-D944-8450-08F9B6F12DC5 -Reinvoke
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2944712088-2880661808-2668827523-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2944712088-2880661808-2668827523-1000UA.job
C:\Windows\tasks\Synology Data Replicator 3-Michaela-PC-Michaela.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\3ce7c1ns.default
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz"
prefs.js - "extensions.enabledItems" - "linkfilter@kaspersky.ru:11.0.0.232, {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18, KavAntiBanner@Kaspersky.ru:11.0.0.232, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.10"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.4]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npwacom.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
npdeployJava1.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\3ce7c1ns.default\searchplugins\
daemon-search.xml
icqplugin.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-27 800448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-12-27 1452224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-08 551840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-27 550080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-08 209824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-27 988864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-27 655040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-12-27 1194176]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-27 455360]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-27 793280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2009-01-23 305664]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2009-06-29 444416]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-06-30 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-06-30 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-06-30 365080]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe [2009-07-17 4968960]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2009-07-02 3180624]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-05 186904]
"lxeamon.exe"=C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [2011-01-23 770728]
"EzPrint"=C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [2009-10-01 139944]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2013-04-19 7074096]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2011-05-13 4283256]
"Data Replicator 3"=C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [2013-04-24 11590528]
"Copernic Desktop Search - Home"=C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe [2013-01-28 1692200]
"Facebook Update"=C:\Users\Michaela\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-30 138096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe -launchedbylogin []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]
C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bamboo Dock]
C:\Program Files (x86)\Bamboo Dock\Bamboo Dock\Bamboo Dock.exe [2010-12-23 178176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BambooCore]
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [2010-12-23 629336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Data Replicator 3]
C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [2013-04-24 11590528]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVDDXSrv]
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [2009-06-25 140520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\\Phone\Skype.exe /nosplash /minimized []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{72C47E50-F95D-415C-8EA5-AE6899B151F3}\DefragIcon.exe
C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CloudStation.lnk - C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-06-03 257536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======File associations======
.js - edit -
.js - open -
.txt - open -
======List of files/folders created in the last 1 month======
2014-01-04 12:25:01 ----D---- C:\rsit
2014-01-04 12:25:01 ----D---- C:\Program Files\trend micro
2013-12-27 13:54:34 ----A---- C:\Windows\ntbtlog.txt
2013-12-27 13:42:48 ----A---- C:\Windows\WININIT.INI
2013-12-27 13:42:10 ----D---- C:\Users\Michaela\AppData\Roaming\Roxio Log Files
2013-12-27 12:27:01 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-12-27 12:24:03 ----D---- C:\Windows\Migration
2013-12-27 12:02:11 ----A---- C:\Windows\system32\klfphc.dll
2013-12-27 12:01:14 ----D---- C:\Windows\ELAMBKUP
2013-12-27 12:01:10 ----D---- C:\ProgramData\Kaspersky Lab
2013-12-27 12:01:10 ----D---- C:\Program Files (x86)\Kaspersky Lab
2013-12-27 12:01:04 ----A---- C:\Windows\system32\drivers\klif.sys
2013-12-27 12:01:04 ----A---- C:\Windows\system32\drivers\klflt.sys
2013-12-27 11:41:25 ----A---- C:\ProgramData\ntuser.dat
2013-12-20 13:08:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 23:56:03 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-19 23:56:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-19 23:56:02 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-19 23:56:02 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-19 23:56:02 ----A---- C:\Windows\system32\ieui.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-19 23:56:01 ----A---- C:\Windows\system32\iesetup.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\iernonce.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-19 23:56:00 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-19 23:56:00 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\mshtml.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-19 23:55:59 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-19 23:55:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-19 23:55:59 ----A---- C:\Windows\system32\wininet.dll
2013-12-19 23:55:59 ----A---- C:\Windows\system32\iertutil.dll
2013-12-19 23:55:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-19 23:55:58 ----A---- C:\Windows\system32\urlmon.dll
2013-12-19 23:55:58 ----A---- C:\Windows\system32\ieframe.dll
2013-12-19 23:55:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-19 23:55:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-19 23:55:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-19 23:55:55 ----A---- C:\Windows\system32\jscript9.dll
2013-12-18 22:43:11 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-12-18 22:38:35 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-12-18 22:38:35 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\url.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-12-18 22:38:31 ----A---- C:\Windows\system32\elshyph.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\wextract.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\webcheck.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\vbscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\url.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\pngfilt.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\occache.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msrating.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msls31.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmler.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmled.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshta.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeedssync.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeeds.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\licmgr10.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\jsIntl.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\jscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\inseng.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\imgutil.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iexpress.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iesysprep.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iepeers.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iedkcs32.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\ieapfltr.dat
2013-12-18 22:38:30 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\icardie.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\dxtrans.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\dxtmsft.dll
2013-12-13 07:08:17 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 23:13:49 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 23:13:49 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 23:13:48 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 23:13:47 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 07:29:13 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 07:29:13 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 07:29:11 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 07:29:11 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 07:29:11 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 07:29:10 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 07:29:10 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 07:29:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 07:29:09 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 07:28:57 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 07:28:57 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 07:27:10 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 07:27:10 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\system32\wscript.exe
2013-12-07 13:19:30 ----D---- C:\Users\Michaela\AppData\Roaming\24FotoPrint
2013-12-07 11:46:51 ----D---- C:\Program Files (x86)\24FotoPrint
======List of files/folders modified in the last 1 month======
2014-01-04 12:25:11 ----D---- C:\Windows\Prefetch
2014-01-04 12:25:04 ----D---- C:\Windows\Temp
2014-01-04 12:25:01 ----RD---- C:\Program Files
2014-01-04 11:23:34 ----D---- C:\Windows\system32\config
2014-01-04 11:05:57 ----SHD---- C:\System Volume Information
2013-12-29 19:41:31 ----D---- C:\Users\Michaela\AppData\Roaming\.dsgui
2013-12-28 13:59:35 ----D---- C:\Windows\Microsoft.NET
2013-12-28 12:36:32 ----RSD---- C:\Windows\assembly
2013-12-27 13:54:45 ----D---- C:\Windows
2013-12-27 13:54:31 ----SHD---- C:\Config.Msi
2013-12-27 13:54:30 ----D---- C:\Windows\System32
2013-12-27 13:52:46 ----D---- C:\Windows\system32\drivers
2013-12-27 13:50:20 ----D---- C:\Windows\Minidump
2013-12-27 13:50:20 ----D---- C:\Windows\debug
2013-12-27 13:43:17 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2013-12-27 13:42:48 ----SHD---- C:\Windows\Installer
2013-12-27 13:42:48 ----RD---- C:\Program Files (x86)
2013-12-27 13:42:41 ----D---- C:\Program Files (x86)\Common Files
2013-12-27 13:42:33 ----D---- C:\Windows\system32\catroot
2013-12-27 13:42:32 ----D---- C:\Windows\inf
2013-12-27 13:41:55 ----D---- C:\ProgramData\Skype
2013-12-27 13:41:53 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2013-12-27 13:38:13 ----D---- C:\Windows\system32\Tasks
2013-12-27 13:38:08 ----D---- C:\Windows\SysWOW64
2013-12-27 12:27:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-27 12:24:27 ----D---- C:\Windows\SYSWOW64\en-US
2013-12-27 12:24:27 ----D---- C:\Windows\system32\en-US
2013-12-27 12:24:03 ----SD---- C:\ProgramData\Microsoft
2013-12-27 12:02:39 ----HD---- C:\ProgramData
2013-12-27 12:02:08 ----D---- C:\Windows\system32\DriverStore
2013-12-22 09:09:32 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:55:33 ----D---- C:\ProgramData\Microsoft Help
2013-12-20 07:27:30 ----D---- C:\Windows\winsxs
2013-12-20 07:26:48 ----D---- C:\Program Files\Internet Explorer
2013-12-20 07:26:48 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-19 23:56:21 ----D---- C:\Windows\system32\catroot2
2013-12-19 15:58:14 ----D---- C:\Windows\rescache
2013-12-19 06:02:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-12-19 06:02:46 ----D---- C:\Windows\system32\cs-CZ
2013-12-19 06:02:44 ----D---- C:\Windows\SYSWOW64\migration
2013-12-19 06:02:40 ----D---- C:\Windows\system32\migration
2013-12-19 06:02:40 ----D---- C:\Windows\PolicyDefinitions
2013-12-18 22:43:11 ----D---- C:\Windows\Logs
2013-12-16 00:20:12 ----D---- C:\Windows\system32\MRT
2013-12-16 00:17:50 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 05:58:03 ----D---- C:\Program Files\Windows Media Player
2013-12-12 05:58:03 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-11 18:26:12 ----D---- C:\Krechlerová
2013-12-11 17:27:51 ----D---- C:\ProgramData\Lx_cats
2013-12-11 14:58:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-12-05 19:11:12 ----D---- C:\Users\Michaela\AppData\Roaming\TeamViewer
2013-12-05 19:07:03 ----RSD---- C:\Windows\Fonts
2013-12-05 19:06:46 ----D---- C:\Program Files (x86)\TeamViewer
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2013-12-27 458336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-07 834544]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2013-12-27 620640]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2013-10-20 29792]
R1 klpd;klpd; C:\Windows\system32\DRIVERS\klpd.sys [2013-04-12 15456]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2013-05-14 55904]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2013-12-27 178272]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows XP/Vista x64; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-02-05 225328]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2009-07-17 22520]
R3 BCM43XX;Ovladač bezdrátové karty Dell WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-07-17 2769400]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-03 7333472]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2013-10-20 29280]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2013-10-20 29280]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-05-08 215552]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2009-06-29 487424]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wacommousefilter;Wacom Mouse Filter Driver; C:\Windows\system32\DRIVERS\wacommousefilter.sys [2007-02-16 12848]
R3 wacomvhid;Wacom Virtual Hid Driver; C:\Windows\system32\DRIVERS\wacomvhid.sys [2009-09-22 16168]
S3 akbf49b1;akbf49b1; C:\Windows\system32\drivers\akbf49b1.sys []
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S4 klflt;klflt; C:\Windows\system32\DRIVERS\klflt.sys [2013-06-08 112224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [2013-10-20 214512]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 lxea_device;lxea_device; C:\Windows\system32\lxeacoms.exe [2010-04-14 1052328]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2013-04-19 2570544]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe [2009-06-29 240128]
R2 SynoDrService;SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [2013-04-24 381312]
R2 TabletServicePen;TabletServicePen; C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2010-07-13 7329648]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536]
R2 TouchServicePen;Wacom Consumer Touch Service; C:\Program Files\Tablet\Pen\Pen_TouchService.exe [2010-07-13 719216]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE [2009-07-17 33280]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [2009-07-29 33960]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Jelikož jste mi zde hodně pomohli, prosím o kontrolu logu manželky PC, PC je také hodně pomalé, videa se sekají, když je spuštěná nějaká náročnější aplikace tak se to vše seká, mockrát vám děkuji za pomoc, zde log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Michaela at 2014-01-04 12:25:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 9 GB (3%) free of 290 GB
Total RAM: 4056 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:25:11, on 4.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe
C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Users\Michaela\AppData\Local\CloudStation\bin\client-win.exe
C:\Program Files\trend micro\Michaela.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Data Replicator 3] "C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe" /MIN
O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Michaela\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: CloudStation.lnk = AppData\Local\CloudStation\bin\cloud.exe
O4 - Global Startup: O&O Defrag Tray.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Přidat do součásti Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: Virtuální klávesnice - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxeaCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe
O23 - Service: lxea_device - - C:\Windows\system32\lxeacoms.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SynoDrService - Unknown owner - C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12514 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
"C:\Program Files\Tablet\Pen\Pen_TouchService.exe"
/QuitInfo:0000000000000248;000000000000024C; /AddRef;
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 1561168
\??\C:\Windows\system32\conhost.exe "756613821-115650329214134583322044938549-142716093362106635-814512625530449023
C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe" -r
C:\Windows\system32\lxeacoms.exe -service
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe"
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe"
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 2224
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
/QuitInfo:00000000000006E4;00000000000006C8; /AddRef;
/QuitInfo:0000000000000654;0000000000000704;
"C:\Program Files\Tablet\Pen\Pen_TouchUser.exe"
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\DellTPad\Apoint.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Tablet\Pen\Pen_TabletUser.exe"
/loadhooks /Parent:0000000000000BB8
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-512685d9-2fb2-491e-a85a-bd50d97502ad -SystemEventPortName:HostProcess-09e483ea-d56b-4d08-bb30-b9d919079bd5 -IoCancelEventPortName:HostProcess-6bc11863-ea4f-4083-b917-fe07e7be5829 -NonStateChangingEventPortName:HostProcess-7d34c6b2-5688-4aba-b8f8-d3c470fb16b1 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2539c43c-acd6-4bba-8512-7a4928342643 -DeviceGroupId:WpdFsGroup
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files\Tablet\Pen\Pen_Tablet.exe" au
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe"
"C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe"
"C:\Program Files\OO Software\Defrag\oodtray.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe" /MIN
"C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe" /tray
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe"
"C:\Program Files\DellTPad\HidFind.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "2074434750-375227808-500308617-1404087506-899064028-71349465318736861-360007034
"C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
C:\Users\Michaela\AppData\Local\CloudStation\bin\..\bin\client-win.exe C:/Users/Michaela/AppData/Local/CloudStation/bin/../config/client.conf 1024
\??\C:\Windows\system32\conhost.exe "-924699327329281005-91255858819410529441419915861-112367456-1394364103-836994647
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Users\Michaela\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey B4F45281-094B-D944-8450-08F9B6F12DC5 -Reinvoke
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2944712088-2880661808-2668827523-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2944712088-2880661808-2668827523-1000UA.job
C:\Windows\tasks\Synology Data Replicator 3-Michaela-PC-Michaela.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\3ce7c1ns.default
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz"
prefs.js - "extensions.enabledItems" - "linkfilter@kaspersky.ru:11.0.0.232, {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18, KavAntiBanner@Kaspersky.ru:11.0.0.232, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.10"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.4]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npwacom.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
C:\Program Files (x86)\Mozilla Firefox\plugins\
npdeployJava1.dll
NPOFF12.DLL
NPOFFICE.DLL
nppdf32.dll
C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\3ce7c1ns.default\searchplugins\
daemon-search.xml
icqplugin.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-27 800448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-12-27 1452224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-08 551840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-27 550080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-08 209824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-27 988864]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-27 655040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-12-27 1194176]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-27 455360]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13 393600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-27 793280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2009-01-23 305664]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2009-06-29 444416]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-06-30 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-06-30 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-06-30 365080]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe [2009-07-17 4968960]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2009-07-02 3180624]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-05 186904]
"lxeamon.exe"=C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe [2011-01-23 770728]
"EzPrint"=C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe [2009-10-01 139944]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2013-04-19 7074096]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2011-05-13 4283256]
"Data Replicator 3"=C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [2013-04-24 11590528]
"Copernic Desktop Search - Home"=C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe [2013-01-28 1692200]
"Facebook Update"=C:\Users\Michaela\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-30 138096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe -launchedbylogin []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]
C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bamboo Dock]
C:\Program Files (x86)\Bamboo Dock\Bamboo Dock\Bamboo Dock.exe [2010-12-23 178176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BambooCore]
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [2010-12-23 629336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Data Replicator 3]
C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [2013-04-24 11590528]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVDDXSrv]
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [2009-06-25 140520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\\Phone\Skype.exe /nosplash /minimized []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell Webcam Central"=C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O&O Defrag Tray.lnk - C:\Windows\Installer\{72C47E50-F95D-415C-8EA5-AE6899B151F3}\DefragIcon.exe
C:\Users\Michaela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CloudStation.lnk - C:\Users\Michaela\AppData\Local\CloudStation\bin\cloud.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-06-03 257536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======File associations======
.js - edit -
.js - open -
.txt - open -
======List of files/folders created in the last 1 month======
2014-01-04 12:25:01 ----D---- C:\rsit
2014-01-04 12:25:01 ----D---- C:\Program Files\trend micro
2013-12-27 13:54:34 ----A---- C:\Windows\ntbtlog.txt
2013-12-27 13:42:48 ----A---- C:\Windows\WININIT.INI
2013-12-27 13:42:10 ----D---- C:\Users\Michaela\AppData\Roaming\Roxio Log Files
2013-12-27 12:27:01 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-12-27 12:24:03 ----D---- C:\Windows\Migration
2013-12-27 12:02:11 ----A---- C:\Windows\system32\klfphc.dll
2013-12-27 12:01:14 ----D---- C:\Windows\ELAMBKUP
2013-12-27 12:01:10 ----D---- C:\ProgramData\Kaspersky Lab
2013-12-27 12:01:10 ----D---- C:\Program Files (x86)\Kaspersky Lab
2013-12-27 12:01:04 ----A---- C:\Windows\system32\drivers\klif.sys
2013-12-27 12:01:04 ----A---- C:\Windows\system32\drivers\klflt.sys
2013-12-27 11:41:25 ----A---- C:\ProgramData\ntuser.dat
2013-12-20 13:08:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 23:56:03 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-19 23:56:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-19 23:56:02 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-19 23:56:02 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-19 23:56:02 ----A---- C:\Windows\system32\ieui.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-19 23:56:01 ----A---- C:\Windows\system32\iesetup.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\iernonce.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-19 23:56:01 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-19 23:56:00 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-19 23:56:00 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\mshtml.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-19 23:56:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-19 23:55:59 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-19 23:55:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-19 23:55:59 ----A---- C:\Windows\system32\wininet.dll
2013-12-19 23:55:59 ----A---- C:\Windows\system32\iertutil.dll
2013-12-19 23:55:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-19 23:55:58 ----A---- C:\Windows\system32\urlmon.dll
2013-12-19 23:55:58 ----A---- C:\Windows\system32\ieframe.dll
2013-12-19 23:55:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-19 23:55:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-19 23:55:56 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-19 23:55:55 ----A---- C:\Windows\system32\jscript9.dll
2013-12-18 22:43:11 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-12-18 22:38:35 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-12-18 22:38:35 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\url.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-12-18 22:38:31 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-12-18 22:38:31 ----A---- C:\Windows\system32\elshyph.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2013-12-18 22:38:30 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\wextract.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\webcheck.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\vbscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\url.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\pngfilt.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\occache.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msrating.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msls31.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmler.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshtmled.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\mshta.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeedssync.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\msfeeds.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\licmgr10.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\jsIntl.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\jscript.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\inseng.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\imgutil.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iexpress.exe
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iesysprep.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iepeers.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\iedkcs32.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\ieapfltr.dat
2013-12-18 22:38:30 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\icardie.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\dxtrans.dll
2013-12-18 22:38:30 ----A---- C:\Windows\system32\dxtmsft.dll
2013-12-13 07:08:17 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 23:13:49 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 23:13:49 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 23:13:48 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 23:13:47 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 07:29:13 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 07:29:13 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 07:29:11 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 07:29:11 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 07:29:11 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 07:29:10 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 07:29:10 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 07:29:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 07:29:09 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 07:28:57 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 07:28:57 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 07:27:10 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 07:27:10 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 07:27:09 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 07:27:09 ----A---- C:\Windows\system32\wscript.exe
2013-12-07 13:19:30 ----D---- C:\Users\Michaela\AppData\Roaming\24FotoPrint
2013-12-07 11:46:51 ----D---- C:\Program Files (x86)\24FotoPrint
======List of files/folders modified in the last 1 month======
2014-01-04 12:25:11 ----D---- C:\Windows\Prefetch
2014-01-04 12:25:04 ----D---- C:\Windows\Temp
2014-01-04 12:25:01 ----RD---- C:\Program Files
2014-01-04 11:23:34 ----D---- C:\Windows\system32\config
2014-01-04 11:05:57 ----SHD---- C:\System Volume Information
2013-12-29 19:41:31 ----D---- C:\Users\Michaela\AppData\Roaming\.dsgui
2013-12-28 13:59:35 ----D---- C:\Windows\Microsoft.NET
2013-12-28 12:36:32 ----RSD---- C:\Windows\assembly
2013-12-27 13:54:45 ----D---- C:\Windows
2013-12-27 13:54:31 ----SHD---- C:\Config.Msi
2013-12-27 13:54:30 ----D---- C:\Windows\System32
2013-12-27 13:52:46 ----D---- C:\Windows\system32\drivers
2013-12-27 13:50:20 ----D---- C:\Windows\Minidump
2013-12-27 13:50:20 ----D---- C:\Windows\debug
2013-12-27 13:43:17 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2013-12-27 13:42:48 ----SHD---- C:\Windows\Installer
2013-12-27 13:42:48 ----RD---- C:\Program Files (x86)
2013-12-27 13:42:41 ----D---- C:\Program Files (x86)\Common Files
2013-12-27 13:42:33 ----D---- C:\Windows\system32\catroot
2013-12-27 13:42:32 ----D---- C:\Windows\inf
2013-12-27 13:41:55 ----D---- C:\ProgramData\Skype
2013-12-27 13:41:53 ----D---- C:\Users\Michaela\AppData\Roaming\Skype
2013-12-27 13:38:13 ----D---- C:\Windows\system32\Tasks
2013-12-27 13:38:08 ----D---- C:\Windows\SysWOW64
2013-12-27 12:27:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-27 12:24:27 ----D---- C:\Windows\SYSWOW64\en-US
2013-12-27 12:24:27 ----D---- C:\Windows\system32\en-US
2013-12-27 12:24:03 ----SD---- C:\ProgramData\Microsoft
2013-12-27 12:02:39 ----HD---- C:\ProgramData
2013-12-27 12:02:08 ----D---- C:\Windows\system32\DriverStore
2013-12-22 09:09:32 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:55:33 ----D---- C:\ProgramData\Microsoft Help
2013-12-20 07:27:30 ----D---- C:\Windows\winsxs
2013-12-20 07:26:48 ----D---- C:\Program Files\Internet Explorer
2013-12-20 07:26:48 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-19 23:56:21 ----D---- C:\Windows\system32\catroot2
2013-12-19 15:58:14 ----D---- C:\Windows\rescache
2013-12-19 06:02:47 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-12-19 06:02:46 ----D---- C:\Windows\system32\cs-CZ
2013-12-19 06:02:44 ----D---- C:\Windows\SYSWOW64\migration
2013-12-19 06:02:40 ----D---- C:\Windows\system32\migration
2013-12-19 06:02:40 ----D---- C:\Windows\PolicyDefinitions
2013-12-18 22:43:11 ----D---- C:\Windows\Logs
2013-12-16 00:20:12 ----D---- C:\Windows\system32\MRT
2013-12-16 00:17:50 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 05:58:03 ----D---- C:\Program Files\Windows Media Player
2013-12-12 05:58:03 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-11 18:26:12 ----D---- C:\Krechlerová
2013-12-11 17:27:51 ----D---- C:\ProgramData\Lx_cats
2013-12-11 14:58:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-12-05 19:11:12 ----D---- C:\Users\Michaela\AppData\Roaming\TeamViewer
2013-12-05 19:07:03 ----RSD---- C:\Windows\Fonts
2013-12-05 19:06:46 ----D---- C:\Program Files (x86)\TeamViewer
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2013-12-27 458336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-06-07 834544]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2013-12-27 620640]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2013-10-20 29792]
R1 klpd;klpd; C:\Windows\system32\DRIVERS\klpd.sys [2013-04-12 15456]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2013-05-14 55904]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2013-12-27 178272]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows XP/Vista x64; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-02-05 225328]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2009-07-17 22520]
R3 BCM43XX;Ovladač bezdrátové karty Dell WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-07-17 2769400]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-03 7333472]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2013-10-20 29280]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2013-10-20 29280]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-05-08 215552]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2009-06-29 487424]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wacommousefilter;Wacom Mouse Filter Driver; C:\Windows\system32\DRIVERS\wacommousefilter.sys [2007-02-16 12848]
R3 wacomvhid;Wacom Virtual Hid Driver; C:\Windows\system32\DRIVERS\wacomvhid.sys [2009-09-22 16168]
S3 akbf49b1;akbf49b1; C:\Windows\system32\drivers\akbf49b1.sys []
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S4 klflt;klflt; C:\Windows\system32\DRIVERS\klflt.sys [2013-06-08 112224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [2013-10-20 214512]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 lxea_device;lxea_device; C:\Windows\system32\lxeacoms.exe [2010-04-14 1052328]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2013-04-19 2570544]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe [2009-06-29 240128]
R2 SynoDrService;SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [2013-04-24 381312]
R2 TabletServicePen;TabletServicePen; C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2010-07-13 7329648]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536]
R2 TouchServicePen;Wacom Consumer Touch Service; C:\Program Files\Tablet\Pen\Pen_TouchService.exe [2010-07-13 719216]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE [2009-07-17 33280]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [2009-07-29 33960]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------