VIRY.CZ

Ahoj,
přeinstalovával jsem počítač, a zřejmě jsem s nějakým staženým softwarem stáhnul nějaký malware. Několik pluginů do chrome jsem odstanil pomocí Yet Another Cleaner utitlity. Ale teď už nic nenachází a přesto mám problém, že každé stažení se po pár mb zasekne na "chyba sítě". Prosím tedy o kontrolu logu,
Dík

Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondra at 2014-01-11 11:50:47
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 69 GB (63%) free of 110 GB
Total RAM: 8078 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:50:51, on 11-Jan-14
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iSafe\iSafeTray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ASUS Browser Extension x86 - {78234974-0C4B-4111-BDEB-D9A104418771} - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iSafeService - Elex do Brasil Participações Ltda - C:\Program Files (x86)\iSafe\iSafeSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.5 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10282 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files (x86)\iSafe\iSafeSvc.exe"
"C:\Program Files (x86)\iSafe\iSafeSvc2.exe"
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
C:\Windows\system32\WLANExt.exe 14335712
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\DCE\dce.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k bthsvcs
"taskhost.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
taskeng.exe {976D6D65-48CF-47B0-A15E-75D148D4B626}
taskeng.exe {47E11750-BCDE-4D9D-8226-9EE389CF38C9}
ATKOSD.exe
taskeng.exe {2D944D19-3A57-4639-B090-3E765745FA2B}
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
WDC.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\iSafe\iSafeTray.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5240.0.1470771561\1985734507" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2696 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.3.662782905\872358710" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.4.859054819\17258416" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.5.959395774\1810145502" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.6.1124956636\1091973481" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.7.105061155\1812903471" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.8.1147986174\2054167376" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --disable-accelerated-video-decode --channel="5240.10.1907797183\2028818972" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.11.733033848\1713958964" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.12.1508967741\163612991" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.13.394018457\618255447" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.14.661128192\1664409949" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.15.992331787\2000480016" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="5240.16.1612638955\47711622" /prefetch:673131151
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\wuauclt.exe"
"D:\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\iWebar-chromeinstaller.job
C:\Windows\tasks\iWebar-codedownloader.job
C:\Windows\tasks\iWebar-enabler.job
C:\Windows\tasks\iWebar-firefoxinstaller.job
C:\Windows\tasks\iWebar-updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-10 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418772}]
ASUS Browser Extension x64 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x64\BrowserExtension64.dll [2012-09-11 23424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-10 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418771}]
ASUS Browser Extension x86 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll [2012-09-11 21376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-02 12921488]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-07-10 1214608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-17 361984]
"ASUSQuickGesture(x86)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [2012-09-11 20352]
"ASUSTPLoader(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe [2012-09-11 169856]
"ASUSQuickGesture(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe [2012-09-11 22400]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-04-02 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16 322176]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-24 174720]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-10 3764024]

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-04-02 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-01-11 11:50:47 ----D---- C:\rsit
2014-01-11 11:50:47 ----D---- C:\Program Files\trend micro
2014-01-11 11:46:38 ----D---- C:\FRST
2014-01-11 11:43:08 ----A---- C:\Windows\system32\browserchoice.exe
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-01-10 23:01:33 ----D---- C:\Windows\Prefetch
2014-01-10 23:01:25 ----SHD---- C:\System Volume Information
2014-01-10 23:01:25 ----ASH---- C:\pagefile.sys
2014-01-10 23:01:25 ----ASH---- C:\hiberfil.sys
2014-01-10 23:00:47 ----D---- C:\Windows\Panther
2014-01-10 21:18:40 ----D---- C:\Program Files\Adobe
2014-01-10 21:17:58 ----SHD---- C:\Config.Msi
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files\Adobe
2014-01-10 21:07:27 ----D---- C:\Users\Ondra\AppData\Roaming\eCyber
2014-01-10 21:07:23 ----D---- C:\Windows\system32\log
2014-01-10 21:07:22 ----D---- C:\Program Files (x86)\iSafe
2014-01-10 21:07:11 ----D---- C:\Users\Ondra\AppData\Roaming\iSafe
2014-01-10 20:11:59 ----D---- C:\Users\Ondra\AppData\Roaming\FishtroneDesktop
2014-01-10 20:04:24 ----D---- C:\Users\Ondra\AppData\Roaming\TortoiseSVN
2014-01-10 19:46:03 ----D---- C:\ProgramData\Samsung
2014-01-10 19:46:03 ----D---- C:\Program Files (x86)\Samsung Magician
2014-01-10 19:37:10 ----D---- C:\Users\Ondra\AppData\Roaming\ShoeBox
2014-01-10 19:34:12 ----A---- C:\openssl.exe
2014-01-10 19:10:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-01-10 19:10:02 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-01-10 19:09:58 ----D---- C:\Windows\system32\Macromed
2014-01-10 19:06:29 ----D---- C:\Users\Ondra\AppData\Roaming\Mozilla
2014-01-10 19:06:22 ----D---- C:\ProgramData\Mozilla
2014-01-10 19:06:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-10 19:06:20 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-01-10 18:40:43 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-01-10 18:29:01 ----D---- C:\ProgramData\Oracle
2014-01-10 18:18:59 ----D---- C:\Users\Ondra\AppData\Roaming\Subversion
2014-01-10 18:08:36 ----D---- C:\Program Files\TortoiseSVN
2014-01-10 18:08:36 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2014-01-10 18:03:47 ----D---- C:\Program Files (x86)\totalcmd
2014-01-10 17:52:28 ----A---- C:\Windows\SYSWOW64\Config.json
2014-01-10 17:19:21 ----A---- C:\Windows\SYSWOW64\rp.dll
2014-01-10 17:14:10 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2014-01-10 17:12:25 ----A---- C:\Windows\system32\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\igfxCoIn_v2696.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhsip64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhcp64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxtray.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxTMM.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxress.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpph.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpers.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxext.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxexps.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdo.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdev.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmrt64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmjit64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igdumd64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdrcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdfcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdde64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdbcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\ig7icd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\igd10umd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\ig7icd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hkcmd.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hccutils.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe.config
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\gfxSrvc.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\difx64.exe
2014-01-10 16:53:40 ----D---- C:\Users\Ondra\AppData\Roaming\WinRAR
2014-01-10 16:23:06 ----D---- C:\Program Files (x86)\iWebar
2014-01-10 16:22:25 ----D---- C:\Program Files (x86)\ShopperPro
2014-01-10 16:21:45 ----D---- C:\Program Files\DCE
2014-01-10 16:20:21 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-01-10 15:38:14 ----D---- C:\Users\Ondra\AppData\Roaming\AVAST Software
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\aswBoot.exe
2014-01-10 15:37:00 ----D---- C:\Program Files\AVAST Software
2014-01-10 15:36:54 ----D---- C:\ProgramData\AVAST Software
2014-01-10 15:35:05 ----D---- C:\Program Files (x86)\LibreOffice 4
2014-01-10 15:29:08 ----D---- C:\Users\Ondra\AppData\Roaming\Apple Computer
2014-01-10 15:29:07 ----DC---- C:\Windows\system32\DRVSTORE
2014-01-10 15:29:07 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-01-10 15:29:03 ----D---- C:\ProgramData\Apple Computer
2014-01-10 15:29:03 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-10 15:29:03 ----D---- C:\Program Files\iTunes
2014-01-10 15:29:03 ----D---- C:\Program Files\iPod
2014-01-10 15:29:03 ----D---- C:\Program Files (x86)\iTunes
2014-01-10 15:28:57 ----D---- C:\Program Files\Common Files\Apple
2014-01-10 15:28:56 ----D---- C:\Program Files (x86)\Apple Software Update
2014-01-10 15:28:53 ----D---- C:\Program Files\Bonjour
2014-01-10 15:28:53 ----D---- C:\Program Files (x86)\Bonjour
2014-01-10 15:28:50 ----D---- C:\ProgramData\Apple
2014-01-10 15:25:52 ----D---- C:\Users\Ondra\AppData\Roaming\DropboxMaster
2014-01-10 15:25:36 ----D---- C:\Users\Ondra\AppData\Roaming\Dropbox
2014-01-10 15:24:47 ----RD---- C:\Program Files (x86)\Skype
2014-01-10 15:24:45 ----D---- C:\ProgramData\Skype
2014-01-10 15:24:16 ----D---- C:\Program Files (x86)\VideoLAN
2014-01-10 15:23:41 ----D---- C:\Program Files (x86)\Audacity
2014-01-10 15:22:51 ----D---- C:\Program Files\WinRAR
2014-01-10 15:22:48 ----A---- C:\Windows\system32\javaws.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-10 15:22:47 ----A---- C:\Windows\system32\javaw.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\java.exe
2014-01-10 15:22:45 ----D---- C:\Program Files\Java
2014-01-10 15:22:12 ----D---- C:\ProgramData\Sun
2014-01-10 15:22:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\java.exe
2014-01-10 15:22:08 ----D---- C:\Program Files (x86)\Java
2014-01-10 15:21:46 ----D---- C:\Users\Ondra\AppData\Roaming\Macromedia
2014-01-10 15:21:46 ----D---- C:\ProgramData\Adobe
2014-01-10 15:21:46 ----D---- C:\Program Files (x86)\Adobe
2014-01-10 15:21:45 ----D---- C:\Users\Ondra\AppData\Roaming\Adobe
2014-01-10 15:21:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-01-10 15:21:08 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-01-10 15:14:52 ----D---- C:\Program Files (x86)\Google
2014-01-10 15:07:14 ----D---- C:\ProgramData\USBChargerPlus
2014-01-10 15:05:09 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-01-10 15:05:03 ----D---- C:\Program Files\DIFX
2014-01-10 15:01:55 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wups2.dll
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wuauclt.exe
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wucltux.dll
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wuaueng.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wups.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wudriver.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wuapi.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuwebv.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuapp.exe
2014-01-10 14:59:11 ----HD---- C:\Windows\system32\WLANProfiles
2014-01-10 14:59:03 ----D---- C:\Users\Ondra\AppData\Roaming\Intel
2014-01-10 14:58:57 ----D---- C:\ProgramData\Roaming
2014-01-10 14:58:23 ----D---- C:\ProgramData\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files\Common Files\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files (x86)\Cisco
2014-01-10 14:57:24 ----D---- C:\Program Files\NVIDIA Corporation
2014-01-10 14:57:03 ----A---- C:\Windows\system32\drivers\AiCharger.sys
2014-01-10 14:56:35 ----A---- C:\Windows\system32\drivers\USB3Ver.dll
2014-01-10 14:56:18 ----D---- C:\Program Files\Intel
2014-01-10 14:56:10 ----D---- C:\Users\Ondra\AppData\Roaming\InstallShield
2014-01-10 14:55:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-01-10 14:54:52 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2014-01-10 14:54:04 ----D---- C:\Program Files (x86)\Intel
2014-01-10 14:54:04 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-01-10 14:53:50 ----D---- C:\Intel
2014-01-10 14:53:39 ----D---- C:\ProgramData\AmUStor
2014-01-10 14:53:39 ----D---- C:\Program Files (x86)\AmIcoSingLun
2014-01-10 14:52:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-01-10 14:52:53 ----D---- C:\Program Files\Realtek
2014-01-10 14:52:48 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tosade.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tepeqapo64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo264.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSHP64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFNHK64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFCOM64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFAPO64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-01-10 14:52:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 14:52:47 ----D---- C:\Program Files (x86)\Realtek
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkApi64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTCOM64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\KAAPORT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\FMAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAC64.dll
2014-01-10 14:52:43 ----HD---- C:\Program Files (x86)\Temp
2014-01-10 14:52:43 ----A---- C:\Windows\RtlExUpd.dll
2014-01-10 14:51:48 ----D---- C:\Program Files (x86)\ASUS
2014-01-10 14:51:33 ----SHD---- C:\Windows\Installer
2014-01-10 14:05:44 ----D---- C:\Users\Ondra\AppData\Roaming\Identities
2014-01-10 14:05:40 ----D---- C:\Users\Ondra\AppData\Roaming\Media Center Programs
2014-01-10 14:05:39 ----SD---- C:\Users\Ondra\AppData\Roaming\Microsoft
2014-01-10 14:04:59 ----D---- C:\Windows\SYSWOW64\Wat
2014-01-10 14:04:59 ----D---- C:\Windows\system32\Wat
2014-01-10 14:04:53 ----SHD---- C:\Recovery
2014-01-10 14:04:51 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2014-01-11 11:50:49 ----D---- C:\Windows\Temp
2014-01-11 11:50:47 ----RD---- C:\Program Files
2014-01-11 11:50:18 ----D---- C:\Windows\System32
2014-01-11 11:50:18 ----D---- C:\Windows\inf
2014-01-11 11:50:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-11 11:46:39 ----D---- C:\Windows
2014-01-11 11:44:30 ----D---- C:\Windows\winsxs
2014-01-11 11:44:30 ----D---- C:\Windows\system32\config
2014-01-11 11:44:07 ----D---- C:\Windows\SysWOW64
2014-01-11 11:44:07 ----D---- C:\Windows\system32\drivers
2014-01-11 11:43:10 ----D---- C:\Windows\system32\catroot
2014-01-11 11:43:06 ----D---- C:\Windows\system32\catroot2
2014-01-11 10:51:59 ----RSD---- C:\Windows\assembly
2014-01-11 10:51:59 ----D---- C:\Windows\Microsoft.NET
2014-01-11 00:21:48 ----D---- C:\Windows\system32\drivers\UMDF
2014-01-10 23:04:17 ----D---- C:\Windows\rescache
2014-01-10 23:04:16 ----D---- C:\Windows\debug
2014-01-10 23:03:24 ----D---- C:\Windows\system32\oobe
2014-01-10 23:02:29 ----D---- C:\Windows\system32\sysprep
2014-01-10 23:01:32 ----D---- C:\Windows\CSC
2014-01-10 23:00:27 ----D---- C:\Windows\Setup
2014-01-10 22:05:24 ----D---- C:\Windows\system32\Tasks
2014-01-10 21:18:34 ----RSD---- C:\Windows\Fonts
2014-01-10 21:17:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files
2014-01-10 21:11:51 ----D---- C:\Windows\system32\wdi
2014-01-10 21:07:22 ----RD---- C:\Program Files (x86)
2014-01-10 21:05:21 ----D---- C:\Windows\Tasks
2014-01-10 19:46:03 ----HD---- C:\ProgramData
2014-01-10 18:08:37 ----D---- C:\Program Files (x86)\Common Files
2014-01-10 17:21:27 ----D---- C:\Program Files\Common Files\System
2014-01-10 17:12:51 ----D---- C:\Windows\system32\DriverStore
2014-01-10 15:21:43 ----SD---- C:\ProgramData\Microsoft
2014-01-10 15:06:25 ----D---- C:\Windows\system32\en-US
2014-01-10 15:01:55 ----D---- C:\Windows\SYSWOW64\en-US
2014-01-10 14:57:02 ----D---- C:\Windows\SYSWOW64\drivers
2014-01-10 14:15:36 ----D---- C:\Windows\system32\CodeIntegrity
2014-01-10 14:11:43 ----D---- C:\Windows\system32\NDF
2014-01-10 14:05:43 ----SHD---- C:\$Recycle.Bin
2014-01-10 14:05:39 ----RD---- C:\Users
2014-01-10 14:05:01 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\user32.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\systemcpl.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\slwga.dll
2014-01-10 14:05:00 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-01-10 14:04:55 ----D---- C:\Windows\system32\restore
2014-01-10 14:04:54 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-10 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-10 207904]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2014-01-10 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-10 1034464]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-10 422216]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [2014-01-09 44032]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-10 78648]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2012-01-20 16128]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-02-29 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-01-10 79672]
R3 ATP;ASUS PS/2 Port Input Device; C:\Windows\system32\DRIVERS\AsusTP.sys [2012-09-11 56704]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-21 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-04-02 14745600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-07-10 4083600]
R3 iSafeKrnl;iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [2014-01-09 219648]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-01-16 103536]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-03-12 11471872]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2010-11-21 552448]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-10 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe [2013-12-18 59392]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]
R2 iSafeService;iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [2014-01-09 468648]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2012-03-29 2669840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-06 136120]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-01-20 149504]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-10 1255736]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.

Díky za rychlou odpověď, tady je log z AdwCleaner

# AdwCleaner v3.016 - Report created 11/01/2014 at 13:01:43
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[!] Folder Deleted : C:\Program Files (x86)\iSafe
Folder Deleted : C:\Users\Ondra\AppData\Roaming\iSafe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\3yretix1.default\prefs.js ]

Line Deleted : user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A183015%2C%22ver%22%3A2%2[...]
Line Deleted : user_pref("extensions.crossrider.bic", "14380d5604f92505b1773fd0eebf2dea");

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1585 octets] - [11/01/2014 13:00:49]
AdwCleaner[S0].txt - [1470 octets] - [11/01/2014 13:01:43]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1530 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondra at 2014-01-11 13:16:04
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 68 GB (61%) free of 110 GB
Total RAM: 8078 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:16:06, on 11-Jan-14
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ASUS Browser Extension x86 - {78234974-0C4B-4111-BDEB-D9A104418771} - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iSafeService - Unknown owner - C:\Program Files (x86)\iSafe\iSafeSvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.5 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9262 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
C:\Windows\system32\WLANExt.exe 14861456
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
ATKOSD.exe
WDC.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\DCE\dce.exe"
taskeng.exe {172CF16B-7813-40B0-97B2-8161CFF691BB}
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\iWebar-chromeinstaller.job
C:\Windows\tasks\iWebar-codedownloader.job
C:\Windows\tasks\iWebar-enabler.job
C:\Windows\tasks\iWebar-firefoxinstaller.job
C:\Windows\tasks\iWebar-updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-10 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418772}]
ASUS Browser Extension x64 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x64\BrowserExtension64.dll [2012-09-11 23424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-10 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418771}]
ASUS Browser Extension x86 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll [2012-09-11 21376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-02 12921488]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-07-10 1214608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-17 361984]
"ASUSQuickGesture(x86)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [2012-09-11 20352]
"ASUSTPLoader(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe [2012-09-11 169856]
"ASUSQuickGesture(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe [2012-09-11 22400]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-04-02 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16 322176]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-24 174720]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-10 3764024]

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-04-02 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-01-11 13:00:20 ----D---- C:\AdwCleaner
2014-01-11 12:25:12 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-01-11 11:50:48 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-01-11 11:50:48 ----A---- C:\Windows\system32\poqexec.exe
2014-01-11 11:50:47 ----D---- C:\rsit
2014-01-11 11:50:47 ----D---- C:\Program Files\trend micro
2014-01-11 11:47:51 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-01-11 11:47:51 ----A---- C:\Windows\system32\packager.dll
2014-01-11 11:46:38 ----D---- C:\FRST
2014-01-11 11:43:08 ----A---- C:\Windows\system32\browserchoice.exe
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-01-10 23:01:33 ----D---- C:\Windows\Prefetch
2014-01-10 23:01:25 ----SHD---- C:\System Volume Information
2014-01-10 23:01:25 ----ASH---- C:\pagefile.sys
2014-01-10 23:01:25 ----ASH---- C:\hiberfil.sys
2014-01-10 23:00:47 ----D---- C:\Windows\Panther
2014-01-10 21:18:40 ----D---- C:\Program Files\Adobe
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files\Adobe
2014-01-10 21:07:27 ----D---- C:\Users\Ondra\AppData\Roaming\eCyber
2014-01-10 21:07:23 ----D---- C:\Windows\system32\log
2014-01-10 21:07:22 ----D---- C:\Program Files (x86)\iSafe
2014-01-10 20:11:59 ----D---- C:\Users\Ondra\AppData\Roaming\FishtroneDesktop
2014-01-10 20:04:24 ----D---- C:\Users\Ondra\AppData\Roaming\TortoiseSVN
2014-01-10 19:46:03 ----D---- C:\ProgramData\Samsung
2014-01-10 19:46:03 ----D---- C:\Program Files (x86)\Samsung Magician
2014-01-10 19:37:10 ----D---- C:\Users\Ondra\AppData\Roaming\ShoeBox
2014-01-10 19:34:12 ----A---- C:\openssl.exe
2014-01-10 19:10:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-01-10 19:10:02 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-01-10 19:09:58 ----D---- C:\Windows\system32\Macromed
2014-01-10 19:06:29 ----D---- C:\Users\Ondra\AppData\Roaming\Mozilla
2014-01-10 19:06:22 ----D---- C:\ProgramData\Mozilla
2014-01-10 19:06:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-10 19:06:20 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-01-10 18:40:43 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-01-10 18:29:01 ----D---- C:\ProgramData\Oracle
2014-01-10 18:18:59 ----D---- C:\Users\Ondra\AppData\Roaming\Subversion
2014-01-10 18:08:36 ----D---- C:\Program Files\TortoiseSVN
2014-01-10 18:08:36 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2014-01-10 18:03:47 ----D---- C:\Program Files (x86)\totalcmd
2014-01-10 17:52:28 ----A---- C:\Windows\SYSWOW64\Config.json
2014-01-10 17:19:21 ----A---- C:\Windows\SYSWOW64\rp.dll
2014-01-10 17:14:10 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2014-01-10 17:12:25 ----A---- C:\Windows\system32\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\igfxCoIn_v2696.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhsip64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhcp64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxtray.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxTMM.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxress.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpph.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpers.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxext.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxexps.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdo.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdev.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmrt64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmjit64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igdumd64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdrcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdfcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdde64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdbcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\ig7icd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\igd10umd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\ig7icd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hkcmd.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hccutils.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe.config
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\gfxSrvc.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\difx64.exe
2014-01-10 16:53:40 ----D---- C:\Users\Ondra\AppData\Roaming\WinRAR
2014-01-10 16:23:06 ----D---- C:\Program Files (x86)\iWebar
2014-01-10 16:22:25 ----D---- C:\Program Files (x86)\ShopperPro
2014-01-10 16:21:45 ----D---- C:\Program Files\DCE
2014-01-10 16:20:21 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-01-10 15:38:14 ----D---- C:\Users\Ondra\AppData\Roaming\AVAST Software
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\aswBoot.exe
2014-01-10 15:37:00 ----D---- C:\Program Files\AVAST Software
2014-01-10 15:36:54 ----D---- C:\ProgramData\AVAST Software
2014-01-10 15:35:05 ----D---- C:\Program Files (x86)\LibreOffice 4
2014-01-10 15:29:08 ----D---- C:\Users\Ondra\AppData\Roaming\Apple Computer
2014-01-10 15:29:07 ----DC---- C:\Windows\system32\DRVSTORE
2014-01-10 15:29:07 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-01-10 15:29:03 ----D---- C:\ProgramData\Apple Computer
2014-01-10 15:29:03 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-10 15:29:03 ----D---- C:\Program Files\iTunes
2014-01-10 15:29:03 ----D---- C:\Program Files\iPod
2014-01-10 15:29:03 ----D---- C:\Program Files (x86)\iTunes
2014-01-10 15:28:57 ----D---- C:\Program Files\Common Files\Apple
2014-01-10 15:28:56 ----D---- C:\Program Files (x86)\Apple Software Update
2014-01-10 15:28:53 ----D---- C:\Program Files\Bonjour
2014-01-10 15:28:53 ----D---- C:\Program Files (x86)\Bonjour
2014-01-10 15:28:50 ----D---- C:\ProgramData\Apple
2014-01-10 15:25:52 ----D---- C:\Users\Ondra\AppData\Roaming\DropboxMaster
2014-01-10 15:25:36 ----D---- C:\Users\Ondra\AppData\Roaming\Dropbox
2014-01-10 15:24:47 ----RD---- C:\Program Files (x86)\Skype
2014-01-10 15:24:45 ----D---- C:\ProgramData\Skype
2014-01-10 15:24:16 ----D---- C:\Program Files (x86)\VideoLAN
2014-01-10 15:23:41 ----D---- C:\Program Files (x86)\Audacity
2014-01-10 15:22:51 ----D---- C:\Program Files\WinRAR
2014-01-10 15:22:48 ----A---- C:\Windows\system32\javaws.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-10 15:22:47 ----A---- C:\Windows\system32\javaw.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\java.exe
2014-01-10 15:22:45 ----D---- C:\Program Files\Java
2014-01-10 15:22:12 ----D---- C:\ProgramData\Sun
2014-01-10 15:22:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\java.exe
2014-01-10 15:22:08 ----D---- C:\Program Files (x86)\Java
2014-01-10 15:21:46 ----D---- C:\Users\Ondra\AppData\Roaming\Macromedia
2014-01-10 15:21:46 ----D---- C:\ProgramData\Adobe
2014-01-10 15:21:46 ----D---- C:\Program Files (x86)\Adobe
2014-01-10 15:21:45 ----D---- C:\Users\Ondra\AppData\Roaming\Adobe
2014-01-10 15:21:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-01-10 15:21:08 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-01-10 15:14:52 ----D---- C:\Program Files (x86)\Google
2014-01-10 15:07:14 ----D---- C:\ProgramData\USBChargerPlus
2014-01-10 15:05:09 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-01-10 15:05:03 ----D---- C:\Program Files\DIFX
2014-01-10 15:01:55 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wups2.dll
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wuauclt.exe
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wucltux.dll
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wuaueng.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wups.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wudriver.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wuapi.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuwebv.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuapp.exe
2014-01-10 14:59:11 ----HD---- C:\Windows\system32\WLANProfiles
2014-01-10 14:59:03 ----D---- C:\Users\Ondra\AppData\Roaming\Intel
2014-01-10 14:58:57 ----D---- C:\ProgramData\Roaming
2014-01-10 14:58:23 ----D---- C:\ProgramData\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files\Common Files\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files (x86)\Cisco
2014-01-10 14:57:24 ----D---- C:\Program Files\NVIDIA Corporation
2014-01-10 14:57:03 ----A---- C:\Windows\system32\drivers\AiCharger.sys
2014-01-10 14:56:35 ----A---- C:\Windows\system32\drivers\USB3Ver.dll
2014-01-10 14:56:18 ----D---- C:\Program Files\Intel
2014-01-10 14:56:10 ----D---- C:\Users\Ondra\AppData\Roaming\InstallShield
2014-01-10 14:55:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-01-10 14:54:52 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2014-01-10 14:54:04 ----D---- C:\Program Files (x86)\Intel
2014-01-10 14:54:04 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-01-10 14:53:50 ----D---- C:\Intel
2014-01-10 14:53:39 ----D---- C:\ProgramData\AmUStor
2014-01-10 14:53:39 ----D---- C:\Program Files (x86)\AmIcoSingLun
2014-01-10 14:52:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-01-10 14:52:53 ----D---- C:\Program Files\Realtek
2014-01-10 14:52:48 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tosade.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tepeqapo64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo264.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSHP64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFNHK64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFCOM64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFAPO64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-01-10 14:52:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 14:52:47 ----D---- C:\Program Files (x86)\Realtek
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkApi64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTCOM64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\KAAPORT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\FMAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAC64.dll
2014-01-10 14:52:43 ----HD---- C:\Program Files (x86)\Temp
2014-01-10 14:52:43 ----A---- C:\Windows\RtlExUpd.dll
2014-01-10 14:51:48 ----D---- C:\Program Files (x86)\ASUS
2014-01-10 14:51:33 ----SHD---- C:\Windows\Installer
2014-01-10 14:05:44 ----D---- C:\Users\Ondra\AppData\Roaming\Identities
2014-01-10 14:05:40 ----D---- C:\Users\Ondra\AppData\Roaming\Media Center Programs
2014-01-10 14:05:39 ----SD---- C:\Users\Ondra\AppData\Roaming\Microsoft
2014-01-10 14:04:59 ----D---- C:\Windows\SYSWOW64\Wat
2014-01-10 14:04:59 ----D---- C:\Windows\system32\Wat
2014-01-10 14:04:53 ----SHD---- C:\Recovery
2014-01-10 14:04:51 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2014-01-11 13:16:05 ----D---- C:\Windows\Temp
2014-01-11 13:07:52 ----D---- C:\Windows\System32
2014-01-11 13:07:52 ----D---- C:\Windows\inf
2014-01-11 13:07:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-11 13:06:31 ----D---- C:\Windows\system32\config
2014-01-11 12:56:03 ----D---- C:\Windows\Microsoft.NET
2014-01-11 12:55:57 ----RSD---- C:\Windows\assembly
2014-01-11 12:55:39 ----D---- C:\Windows\SysWOW64
2014-01-11 12:54:39 ----D---- C:\Windows\winsxs
2014-01-11 12:25:12 ----D---- C:\Windows\Logs
2014-01-11 12:24:20 ----D---- C:\Windows\system32\catroot
2014-01-11 12:22:52 ----D---- C:\Windows\system32\catroot2
2014-01-11 12:18:33 ----D---- C:\Windows
2014-01-11 11:50:47 ----RD---- C:\Program Files
2014-01-11 11:44:07 ----D---- C:\Windows\system32\drivers
2014-01-11 00:21:48 ----D---- C:\Windows\system32\drivers\UMDF
2014-01-10 23:04:17 ----D---- C:\Windows\rescache
2014-01-10 23:04:16 ----D---- C:\Windows\debug
2014-01-10 23:03:24 ----D---- C:\Windows\system32\oobe
2014-01-10 23:02:29 ----D---- C:\Windows\system32\sysprep
2014-01-10 23:01:32 ----D---- C:\Windows\CSC
2014-01-10 23:00:27 ----D---- C:\Windows\Setup
2014-01-10 22:05:24 ----D---- C:\Windows\system32\Tasks
2014-01-10 21:18:34 ----RSD---- C:\Windows\Fonts
2014-01-10 21:17:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files
2014-01-10 21:11:51 ----D---- C:\Windows\system32\wdi
2014-01-10 21:07:22 ----RD---- C:\Program Files (x86)
2014-01-10 21:05:21 ----D---- C:\Windows\Tasks
2014-01-10 19:46:03 ----HD---- C:\ProgramData
2014-01-10 18:08:37 ----D---- C:\Program Files (x86)\Common Files
2014-01-10 17:21:27 ----D---- C:\Program Files\Common Files\System
2014-01-10 17:12:51 ----D---- C:\Windows\system32\DriverStore
2014-01-10 15:21:43 ----SD---- C:\ProgramData\Microsoft
2014-01-10 15:06:25 ----D---- C:\Windows\system32\en-US
2014-01-10 15:01:55 ----D---- C:\Windows\SYSWOW64\en-US
2014-01-10 14:57:02 ----D---- C:\Windows\SYSWOW64\drivers
2014-01-10 14:15:36 ----D---- C:\Windows\system32\CodeIntegrity
2014-01-10 14:11:43 ----D---- C:\Windows\system32\NDF
2014-01-10 14:05:43 ----SHD---- C:\$Recycle.Bin
2014-01-10 14:05:39 ----RD---- C:\Users
2014-01-10 14:05:01 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\user32.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\systemcpl.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\slwga.dll
2014-01-10 14:05:00 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-01-10 14:04:55 ----D---- C:\Windows\system32\restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-10 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-10 207904]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2014-01-10 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-10 1034464]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-10 422216]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-10 78648]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2012-01-20 16128]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-02-29 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 ATP;ASUS PS/2 Port Input Device; C:\Windows\system32\DRIVERS\AsusTP.sys [2012-09-11 56704]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-21 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-04-02 14745600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-07-10 4083600]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-01-16 103536]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-03-12 11471872]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-01-10 79672]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2010-11-21 552448]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 iSafeKrnl;iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-10 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe [2013-12-18 59392]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2012-03-29 2669840]
S2 iSafeService;iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-06 136120]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-01-20 149504]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-10 1255736]

-----------------EOF-----------------

Ještě bych poprosil o pomoct, zřejmě tam pořád zůstává ten iSafe nebo něco, internet blbne. Díky

Jeste jsem to spustil jednou, druhy log:

# AdwCleaner v3.016 - Report created 11/01/2014 at 17:01:27
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\iSafe

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\3yretix1.default\prefs.js ]

Line Deleted : user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A183015%2C%22ver%22%3A2%2[...]
Line Deleted : user_pref("extensions.crossrider.bic", "14380d5604f92505b1773fd0eebf2dea");

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1585 octets] - [11/01/2014 13:00:49]
AdwCleaner[R1].txt - [1366 octets] - [11/01/2014 17:00:38]
AdwCleaner[S0].txt - [1610 octets] - [11/01/2014 13:01:43]
AdwCleaner[S1].txt - [1295 octets] - [11/01/2014 17:01:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1355 octets] ##########






A RSIT


Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondra at 2014-01-11 18:01:43
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 67 GB (61%) free of 110 GB
Total RAM: 8078 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:01:45, on 11-Jan-14
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
D:\Documents\ProgrammingLibraries\Android\adt-bundle\sdk\platform-tools\adb.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ASUS Browser Extension x86 - {78234974-0C4B-4111-BDEB-D9A104418771} - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iSafeService - Unknown owner - C:\Program Files (x86)\iSafe\iSafeSvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.5 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10284 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
C:\Windows\system32\WLANExt.exe 11246736
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
ATKOSD.exe
WDC.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"taskhost.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\DCE\dce.exe"
taskeng.exe {8652389E-91E7-4190-B0AA-F3CB1C680480}
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\System32\svchost.exe -k secsvcs
adb fork-server server
C:\Windows\system32\AUDIODG.EXE 0x398
"taskhost.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3860.0.1827389764\1315892616" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2696 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --disable-accelerated-video-decode --channel="3860.1.1437028052\1863152244" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.2.264971369\930406262" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.3.806039904\1495981669" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.4.1802172213\1365528855" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.5.499958576\1229057477" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.6.1238757876\1359995998" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.7.1637887097\138450729" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InstantExtended/Group3 pct:10b stable:r7 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_42/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --disable-accelerated-video-decode --channel="3860.8.1398000948\868064281" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\iWebar-chromeinstaller.job
C:\Windows\tasks\iWebar-codedownloader.job
C:\Windows\tasks\iWebar-enabler.job
C:\Windows\tasks\iWebar-firefoxinstaller.job
C:\Windows\tasks\iWebar-updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-10 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418772}]
ASUS Browser Extension x64 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x64\BrowserExtension64.dll [2012-09-11 23424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-10 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418771}]
ASUS Browser Extension x86 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll [2012-09-11 21376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-02 12921488]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-07-10 1214608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-17 361984]
"ASUSQuickGesture(x86)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [2012-09-11 20352]
"ASUSTPLoader(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe [2012-09-11 169856]
"ASUSQuickGesture(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe [2012-09-11 22400]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-04-02 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2013-12-11 1564528]
"KiesAirMessage"=C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16 322176]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-24 174720]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-10 3764024]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2013-12-11 311152]

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-04-02 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-01-11 17:55:51 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2014-01-11 17:55:48 ----A---- C:\Windows\SYSWOW64\dgderapi.dll
2014-01-11 17:55:34 ----D---- C:\Program Files (x86)\Samsung
2014-01-11 13:00:20 ----D---- C:\AdwCleaner
2014-01-11 12:25:12 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-01-11 11:50:48 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-01-11 11:50:48 ----A---- C:\Windows\system32\poqexec.exe
2014-01-11 11:50:47 ----D---- C:\rsit
2014-01-11 11:50:47 ----D---- C:\Program Files\trend micro
2014-01-11 11:47:51 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-01-11 11:47:51 ----A---- C:\Windows\system32\packager.dll
2014-01-11 11:46:38 ----D---- C:\FRST
2014-01-11 11:43:08 ----A---- C:\Windows\system32\browserchoice.exe
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wintrust.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\imagehlp.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-01-10 23:01:33 ----D---- C:\Windows\Prefetch
2014-01-10 23:01:25 ----SHD---- C:\System Volume Information
2014-01-10 23:01:25 ----ASH---- C:\pagefile.sys
2014-01-10 23:01:25 ----ASH---- C:\hiberfil.sys
2014-01-10 23:00:47 ----D---- C:\Windows\Panther
2014-01-10 21:18:40 ----D---- C:\Program Files\Adobe
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files\Adobe
2014-01-10 21:07:27 ----D---- C:\Users\Ondra\AppData\Roaming\eCyber
2014-01-10 21:07:23 ----D---- C:\Windows\system32\log
2014-01-10 20:11:59 ----D---- C:\Users\Ondra\AppData\Roaming\FishtroneDesktop
2014-01-10 20:04:24 ----D---- C:\Users\Ondra\AppData\Roaming\TortoiseSVN
2014-01-10 19:46:03 ----D---- C:\ProgramData\Samsung
2014-01-10 19:46:03 ----D---- C:\Program Files (x86)\Samsung Magician
2014-01-10 19:37:10 ----D---- C:\Users\Ondra\AppData\Roaming\ShoeBox
2014-01-10 19:34:12 ----A---- C:\openssl.exe
2014-01-10 19:10:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-01-10 19:10:02 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-01-10 19:09:58 ----D---- C:\Windows\system32\Macromed
2014-01-10 19:06:29 ----D---- C:\Users\Ondra\AppData\Roaming\Mozilla
2014-01-10 19:06:22 ----D---- C:\ProgramData\Mozilla
2014-01-10 19:06:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-10 19:06:20 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-01-10 18:40:43 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-01-10 18:29:01 ----D---- C:\ProgramData\Oracle
2014-01-10 18:18:59 ----D---- C:\Users\Ondra\AppData\Roaming\Subversion
2014-01-10 18:08:36 ----D---- C:\Program Files\TortoiseSVN
2014-01-10 18:08:36 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2014-01-10 18:03:47 ----D---- C:\Program Files (x86)\totalcmd
2014-01-10 17:52:28 ----A---- C:\Windows\SYSWOW64\Config.json
2014-01-10 17:19:21 ----A---- C:\Windows\SYSWOW64\rp.dll
2014-01-10 17:14:10 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2014-01-10 17:12:25 ----A---- C:\Windows\system32\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\igfxCoIn_v2696.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhsip64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhcp64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxtray.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxTMM.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxress.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpph.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpers.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxext.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxexps.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdo.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdev.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmrt64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmjit64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igdumd64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdrcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdfcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdde64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdbcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\ig7icd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\igd10umd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\ig7icd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hkcmd.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hccutils.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe.config
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\gfxSrvc.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\difx64.exe
2014-01-10 16:53:40 ----D---- C:\Users\Ondra\AppData\Roaming\WinRAR
2014-01-10 16:23:06 ----D---- C:\Program Files (x86)\iWebar
2014-01-10 16:22:25 ----D---- C:\Program Files (x86)\ShopperPro
2014-01-10 16:21:45 ----D---- C:\Program Files\DCE
2014-01-10 16:20:21 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-01-10 15:38:14 ----D---- C:\Users\Ondra\AppData\Roaming\AVAST Software
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\aswBoot.exe
2014-01-10 15:37:00 ----D---- C:\Program Files\AVAST Software
2014-01-10 15:36:54 ----D---- C:\ProgramData\AVAST Software
2014-01-10 15:35:05 ----D---- C:\Program Files (x86)\LibreOffice 4
2014-01-10 15:29:08 ----D---- C:\Users\Ondra\AppData\Roaming\Apple Computer
2014-01-10 15:29:07 ----DC---- C:\Windows\system32\DRVSTORE
2014-01-10 15:29:07 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-01-10 15:29:03 ----D---- C:\ProgramData\Apple Computer
2014-01-10 15:29:03 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-10 15:29:03 ----D---- C:\Program Files\iTunes
2014-01-10 15:29:03 ----D---- C:\Program Files\iPod
2014-01-10 15:29:03 ----D---- C:\Program Files (x86)\iTunes
2014-01-10 15:28:57 ----D---- C:\Program Files\Common Files\Apple
2014-01-10 15:28:56 ----D---- C:\Program Files (x86)\Apple Software Update
2014-01-10 15:28:53 ----D---- C:\Program Files\Bonjour
2014-01-10 15:28:53 ----D---- C:\Program Files (x86)\Bonjour
2014-01-10 15:28:50 ----D---- C:\ProgramData\Apple
2014-01-10 15:25:52 ----D---- C:\Users\Ondra\AppData\Roaming\DropboxMaster
2014-01-10 15:25:36 ----D---- C:\Users\Ondra\AppData\Roaming\Dropbox
2014-01-10 15:24:47 ----RD---- C:\Program Files (x86)\Skype
2014-01-10 15:24:45 ----D---- C:\ProgramData\Skype
2014-01-10 15:24:16 ----D---- C:\Program Files (x86)\VideoLAN
2014-01-10 15:23:41 ----D---- C:\Program Files (x86)\Audacity
2014-01-10 15:22:51 ----D---- C:\Program Files\WinRAR
2014-01-10 15:22:48 ----A---- C:\Windows\system32\javaws.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-10 15:22:47 ----A---- C:\Windows\system32\javaw.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\java.exe
2014-01-10 15:22:45 ----D---- C:\Program Files\Java
2014-01-10 15:22:12 ----D---- C:\ProgramData\Sun
2014-01-10 15:22:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\java.exe
2014-01-10 15:22:08 ----D---- C:\Program Files (x86)\Java
2014-01-10 15:21:46 ----D---- C:\Users\Ondra\AppData\Roaming\Macromedia
2014-01-10 15:21:46 ----D---- C:\ProgramData\Adobe
2014-01-10 15:21:46 ----D---- C:\Program Files (x86)\Adobe
2014-01-10 15:21:45 ----D---- C:\Users\Ondra\AppData\Roaming\Adobe
2014-01-10 15:21:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-01-10 15:21:08 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-01-10 15:14:52 ----D---- C:\Program Files (x86)\Google
2014-01-10 15:07:14 ----D---- C:\ProgramData\USBChargerPlus
2014-01-10 15:05:09 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-01-10 15:05:03 ----D---- C:\Program Files\DIFX
2014-01-10 15:01:55 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wups2.dll
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wuauclt.exe
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wucltux.dll
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wuaueng.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wups.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wudriver.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wuapi.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuwebv.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuapp.exe
2014-01-10 14:59:11 ----HD---- C:\Windows\system32\WLANProfiles
2014-01-10 14:59:03 ----D---- C:\Users\Ondra\AppData\Roaming\Intel
2014-01-10 14:58:57 ----D---- C:\ProgramData\Roaming
2014-01-10 14:58:23 ----D---- C:\ProgramData\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files\Common Files\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files (x86)\Cisco
2014-01-10 14:57:24 ----D---- C:\Program Files\NVIDIA Corporation
2014-01-10 14:57:03 ----A---- C:\Windows\system32\drivers\AiCharger.sys
2014-01-10 14:56:35 ----A---- C:\Windows\system32\drivers\USB3Ver.dll
2014-01-10 14:56:18 ----D---- C:\Program Files\Intel
2014-01-10 14:56:10 ----D---- C:\Users\Ondra\AppData\Roaming\InstallShield
2014-01-10 14:55:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-01-10 14:54:52 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2014-01-10 14:54:04 ----D---- C:\Program Files (x86)\Intel
2014-01-10 14:54:04 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-01-10 14:53:50 ----D---- C:\Intel
2014-01-10 14:53:39 ----D---- C:\ProgramData\AmUStor
2014-01-10 14:53:39 ----D---- C:\Program Files (x86)\AmIcoSingLun
2014-01-10 14:52:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-01-10 14:52:53 ----D---- C:\Program Files\Realtek
2014-01-10 14:52:48 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tosade.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tepeqapo64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo264.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSHP64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFNHK64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFCOM64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFAPO64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-01-10 14:52:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 14:52:47 ----D---- C:\Program Files (x86)\Realtek
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkApi64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTCOM64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\KAAPORT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\FMAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAC64.dll
2014-01-10 14:52:43 ----HD---- C:\Program Files (x86)\Temp
2014-01-10 14:52:43 ----A---- C:\Windows\RtlExUpd.dll
2014-01-10 14:51:48 ----D---- C:\Program Files (x86)\ASUS
2014-01-10 14:51:33 ----SHD---- C:\Windows\Installer
2014-01-10 14:05:44 ----D---- C:\Users\Ondra\AppData\Roaming\Identities
2014-01-10 14:05:40 ----D---- C:\Users\Ondra\AppData\Roaming\Media Center Programs
2014-01-10 14:05:39 ----SD---- C:\Users\Ondra\AppData\Roaming\Microsoft
2014-01-10 14:04:59 ----D---- C:\Windows\SYSWOW64\Wat
2014-01-10 14:04:59 ----D---- C:\Windows\system32\Wat
2014-01-10 14:04:53 ----SHD---- C:\Recovery
2014-01-10 14:04:51 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2014-01-11 18:01:44 ----D---- C:\Windows\Temp
2014-01-11 17:57:22 ----D---- C:\Windows\Microsoft.NET
2014-01-11 17:56:19 ----D---- C:\Windows\system32\DriverStore
2014-01-11 17:56:19 ----D---- C:\Windows\system32\catroot
2014-01-11 17:56:19 ----D---- C:\Windows\inf
2014-01-11 17:55:51 ----D---- C:\Windows\SysWOW64
2014-01-11 17:55:39 ----D---- C:\Windows
2014-01-11 17:55:34 ----RD---- C:\Program Files (x86)
2014-01-11 17:09:15 ----D---- C:\Windows\System32
2014-01-11 17:09:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-11 17:01:45 ----D---- C:\Windows\system32\config
2014-01-11 13:18:31 ----D---- C:\Windows\winsxs
2014-01-11 12:55:57 ----RSD---- C:\Windows\assembly
2014-01-11 12:25:12 ----D---- C:\Windows\Logs
2014-01-11 12:22:52 ----D---- C:\Windows\system32\catroot2
2014-01-11 11:50:47 ----RD---- C:\Program Files
2014-01-11 11:44:07 ----D---- C:\Windows\system32\drivers
2014-01-11 00:21:48 ----D---- C:\Windows\system32\drivers\UMDF
2014-01-10 23:04:17 ----D---- C:\Windows\rescache
2014-01-10 23:04:16 ----D---- C:\Windows\debug
2014-01-10 23:03:24 ----D---- C:\Windows\system32\oobe
2014-01-10 23:02:29 ----D---- C:\Windows\system32\sysprep
2014-01-10 23:01:32 ----D---- C:\Windows\CSC
2014-01-10 23:00:27 ----D---- C:\Windows\Setup
2014-01-10 22:05:24 ----D---- C:\Windows\system32\Tasks
2014-01-10 21:18:34 ----RSD---- C:\Windows\Fonts
2014-01-10 21:17:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files
2014-01-10 21:11:51 ----D---- C:\Windows\system32\wdi
2014-01-10 21:05:21 ----D---- C:\Windows\Tasks
2014-01-10 19:46:03 ----HD---- C:\ProgramData
2014-01-10 18:08:37 ----D---- C:\Program Files (x86)\Common Files
2014-01-10 17:21:27 ----D---- C:\Program Files\Common Files\System
2014-01-10 15:21:43 ----SD---- C:\ProgramData\Microsoft
2014-01-10 15:06:25 ----D---- C:\Windows\system32\en-US
2014-01-10 15:01:55 ----D---- C:\Windows\SYSWOW64\en-US
2014-01-10 14:57:02 ----D---- C:\Windows\SYSWOW64\drivers
2014-01-10 14:15:36 ----D---- C:\Windows\system32\CodeIntegrity
2014-01-10 14:11:43 ----D---- C:\Windows\system32\NDF
2014-01-10 14:05:43 ----SHD---- C:\$Recycle.Bin
2014-01-10 14:05:39 ----RD---- C:\Users
2014-01-10 14:05:01 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\user32.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\systemcpl.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\slwga.dll
2014-01-10 14:05:00 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-01-10 14:04:55 ----D---- C:\Windows\system32\restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-10 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-10 207904]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2014-01-10 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-10 1034464]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-10 422216]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-10 78648]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2012-01-20 16128]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-02-29 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-01-10 79672]
R3 ATP;ASUS PS/2 Port Input Device; C:\Windows\system32\DRIVERS\AsusTP.sys [2012-09-11 56704]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-21 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-04-02 14745600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-07-10 4083600]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-01-16 103536]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-03-12 11471872]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys []
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2010-11-21 552448]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 iSafeKrnl;iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-10 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe [2013-12-18 59392]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2012-03-29 2669840]
S2 iSafeService;iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-06 136120]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-01-20 149504]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-10 1255736]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\iWebar-chromeinstaller.job
C:\Windows\tasks\iWebar-codedownloader.job
C:\Windows\tasks\iWebar-enabler.job
C:\Windows\tasks\iWebar-firefoxinstaller.job
C:\Windows\tasks\iWebar-updater.job
C:\Program Files (x86)\iWebar
C:\Program Files (x86)\iSafe

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

:services
iSafeKrnl

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte Avast a po něm restartujte PC. Dejte nový log RSIT.

Díky

Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondra at 2014-01-11 18:34:19
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 67 GB (61%) free of 110 GB
Total RAM: 8078 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:34:21, on 11-Jan-14
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ASUS Browser Extension x86 - {78234974-0C4B-4111-BDEB-D9A104418771} - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iSafeService - Unknown owner - C:\Program Files (x86)\iSafe\iSafeSvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.5 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9941 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x304
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
C:\Windows\system32\WLANExt.exe 21615712
\??\C:\Windows\system32\conhost.exe "-658942190816453142205009244714032607941233942495208377182611922675241996743263
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\DCE\dce.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
taskeng.exe {BA6140FD-4190-460F-B336-5C222C2D7870}
ATKOSD.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskeng.exe {CB3664F1-220C-44D9-8CEA-590153816C7C}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
taskeng.exe {F420026D-B83C-40B5-8B61-9548B7D19450}
WDC.exe
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
rundll32.exe C:\Windows\system32\newdev.dll,pDiDeviceInstallNotification \\.\pipe\PNP_Device_Install_Pipe_1.{34ab37bc-6a02-4fed-99a9-efca425240b1} "(null)"
DrvInst.exe "1" "200" "usb\vid_04e8&pid_6866&mi_00\6&7872c&1&0000" "" "" "5e27f178b" "0000000000000000" "00000000000005CC" "0000000000000638"
rundll32.exe C:\Windows\system32\newdev.dll,pDiDeviceInstallNotification \\.\pipe\PNP_Device_Install_Pipe_1.{6f34870a-3a73-4a9e-aca5-dbe267038208} "(null)"
"C:\Windows\System32\dinotify.exe" pnpui.dll,SimplifiedDINotification
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-947eb1c9-6794-4b0b-8b73-c26fe85ed710 -SystemEventPortName:HostProcess-1c9289ee-6613-4701-bd3b-89328f9669f3 -IoCancelEventPortName:HostProcess-0e3c153e-95e8-421f-a8bb-f23e20b9ea50 -NonStateChangingEventPortName:HostProcess-c6bfc988-e0e1-4ec4-9304-a9613eb16f0d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:efe4185b-77dc-4d9d-8ce4-f72ccb7fc78d
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Downloads\RSITx64.exe"
C:\Windows\System32\mobsync.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-01-10 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418772}]
ASUS Browser Extension x64 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x64\BrowserExtension64.dll [2012-09-11 23424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-01-10 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78234974-0C4B-4111-BDEB-D9A104418771}]
ASUS Browser Extension x86 - C:\Program Files (x86)\ASUS\ASUS Smart Gesture\install\x86\BrowserExtension.dll [2012-09-11 21376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-01-10 1372864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-10 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-02 12921488]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-07-10 1214608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-17 361984]
"ASUSQuickGesture(x86)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [2012-09-11 20352]
"ASUSTPLoader(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe [2012-09-11 169856]
"ASUSQuickGesture(x64)"=C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe [2012-09-11 22400]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-04-02 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-04-02 398616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2013-12-11 1564528]
"KiesAirMessage"=C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16 322176]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-24 174720]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-27 291608]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-10 3764024]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2013-12-11 311152]

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-04-02 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-01-11 18:32:01 ----D---- C:\_OTM
2014-01-11 18:16:34 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-01-11 18:16:34 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\url.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-01-11 18:16:33 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-01-11 18:16:33 ----A---- C:\Windows\system32\elshyph.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-01-11 18:16:32 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\wininet.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\wextract.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\webcheck.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\vbscript.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\urlmon.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\url.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\pngfilt.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\occache.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\msrating.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\msls31.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\mshtmler.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\mshtmled.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\mshtml.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\mshta.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\msfeedssync.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\msfeeds.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\licmgr10.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\jsproxy.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\jsIntl.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\jscript9diag.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\jscript9.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\jscript.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\inseng.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\imgutil.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iexpress.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieUnatt.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieui.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iesysprep.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iesetup.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iertutil.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iernonce.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iepeers.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieframe.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\iedkcs32.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ieapfltr.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\ie4uinit.exe
2014-01-11 18:16:32 ----A---- C:\Windows\system32\icardie.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\dxtrans.dll
2014-01-11 18:16:32 ----A---- C:\Windows\system32\dxtmsft.dll
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\user.exe
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-01-11 18:15:58 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\wow64win.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\wow64cpu.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\wow64.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\tdh.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\ntvdm64.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-01-11 18:15:58 ----A---- C:\Windows\system32\ntdll.dll
2014-01-11 18:15:58 ----A---- C:\Windows\system32\advapi32.dll
2014-01-11 18:15:30 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-01-11 18:15:30 ----A---- C:\Windows\system32\mswsock.dll
2014-01-11 18:15:30 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-11 18:13:11 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-01-11 18:13:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\XpsPrint.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\WMPhoto.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\UIAnimation.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\FntCache.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\dxgi.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\DWrite.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10warp.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10level9.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10core.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10_1.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d3d10.dll
2014-01-11 18:13:11 ----A---- C:\Windows\system32\d2d1.dll
2014-01-11 18:12:39 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-01-11 18:12:39 ----A---- C:\Windows\system32\d3d11.dll
2014-01-11 17:55:51 ----A---- C:\Windows\SYSWOW64\Redemption.dll
2014-01-11 17:55:48 ----A---- C:\Windows\SYSWOW64\dgderapi.dll
2014-01-11 17:55:34 ----D---- C:\Program Files (x86)\Samsung
2014-01-11 13:00:20 ----D---- C:\AdwCleaner
2014-01-11 12:25:12 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-01-11 11:51:13 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-01-11 11:51:13 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-01-11 11:51:13 ----A---- C:\Windows\system32\nshwfp.dll
2014-01-11 11:51:13 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-01-11 11:51:13 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-01-11 11:51:11 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-01-11 11:51:11 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\system32\odbctrac.dll
2014-01-11 11:51:11 ----A---- C:\Windows\system32\odbccu32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\system32\odbccr32.dll
2014-01-11 11:51:11 ----A---- C:\Windows\system32\odbccp32.dll
2014-01-11 11:51:10 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-01-11 11:51:10 ----A---- C:\Windows\system32\comctl32.dll
2014-01-11 11:50:48 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-01-11 11:50:48 ----A---- C:\Windows\system32\poqexec.exe
2014-01-11 11:50:47 ----D---- C:\rsit
2014-01-11 11:50:47 ----D---- C:\Program Files\trend micro
2014-01-11 11:50:46 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-01-11 11:50:46 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-01-11 11:50:46 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-01-11 11:50:46 ----A---- C:\Windows\system32\tsgqec.dll
2014-01-11 11:50:46 ----A---- C:\Windows\system32\mstscax.dll
2014-01-11 11:50:46 ----A---- C:\Windows\system32\aaclient.dll
2014-01-11 11:50:44 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-01-11 11:50:44 ----A---- C:\Windows\system32\wintrust.dll
2014-01-11 11:50:42 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-01-11 11:50:42 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-01-11 11:50:42 ----A---- C:\Windows\system32\sbe.dll
2014-01-11 11:50:42 ----A---- C:\Windows\system32\CPFilters.dll
2014-01-11 11:50:41 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-01-11 11:50:41 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-01-11 11:50:41 ----A---- C:\Windows\system32\quartz.dll
2014-01-11 11:50:41 ----A---- C:\Windows\system32\qdvd.dll
2014-01-11 11:50:39 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-01-11 11:50:39 ----A---- C:\Windows\system32\consent.exe
2014-01-11 11:50:39 ----A---- C:\Windows\system32\authui.dll
2014-01-11 11:50:39 ----A---- C:\Windows\system32\appinfo.dll
2014-01-11 11:50:36 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-01-11 11:50:36 ----A---- C:\Windows\system32\win32k.sys
2014-01-11 11:50:36 ----A---- C:\Windows\system32\webio.dll
2014-01-11 11:50:36 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-01-11 11:50:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-01-11 11:50:36 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-01-11 11:50:35 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-01-11 11:50:34 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-01-11 11:50:34 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-01-11 11:50:34 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-01-11 11:50:34 ----A---- C:\Windows\system32\cryptsvc.dll
2014-01-11 11:50:34 ----A---- C:\Windows\system32\cryptnet.dll
2014-01-11 11:50:34 ----A---- C:\Windows\system32\crypt32.dll
2014-01-11 11:50:33 ----A---- C:\Windows\system32\imagehlp.dll
2014-01-11 11:50:32 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-01-11 11:50:32 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-01-11 11:50:32 ----A---- C:\Windows\system32\tzres.dll
2014-01-11 11:50:28 ----A---- C:\Windows\system32\drivers\afd.sys
2014-01-11 11:50:06 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-01-11 11:50:06 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-01-11 11:50:04 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-01-11 11:50:04 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-01-11 11:50:04 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-01-11 11:50:04 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-01-11 11:50:04 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-01-11 11:50:04 ----A---- C:\Windows\system32\lpk.dll
2014-01-11 11:50:04 ----A---- C:\Windows\system32\fontsub.dll
2014-01-11 11:50:04 ----A---- C:\Windows\system32\dciman32.dll
2014-01-11 11:50:04 ----A---- C:\Windows\system32\atmlib.dll
2014-01-11 11:50:04 ----A---- C:\Windows\system32\atmfd.dll
2014-01-11 11:50:01 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-01-11 11:50:01 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-01-11 11:50:01 ----A---- C:\Windows\system32\mfc42u.dll
2014-01-11 11:50:01 ----A---- C:\Windows\system32\mfc42.dll
2014-01-11 11:49:45 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-01-11 11:49:45 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-01-11 11:49:45 ----A---- C:\Windows\system32\sspicli.dll
2014-01-11 11:49:45 ----A---- C:\Windows\system32\schannel.dll
2014-01-11 11:49:45 ----A---- C:\Windows\system32\ncrypt.dll
2014-01-11 11:49:45 ----A---- C:\Windows\system32\lsass.exe
2014-01-11 11:49:45 ----A---- C:\Windows\system32\lsasrv.dll
2014-01-11 11:49:45 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-01-11 11:49:45 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-01-11 11:49:45 ----A---- C:\Windows\system32\drivers\cng.sys
2014-01-11 11:49:44 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-01-11 11:49:44 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-01-11 11:49:44 ----A---- C:\Windows\system32\sspisrv.dll
2014-01-11 11:49:44 ----A---- C:\Windows\system32\secur32.dll
2014-01-11 11:49:42 ----A---- C:\Windows\system32\KernelBase.dll
2014-01-11 11:49:42 ----A---- C:\Windows\system32\kernel32.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-11 11:49:41 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-01-11 11:49:41 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-01-11 11:49:41 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-01-11 11:49:41 ----A---- C:\Windows\system32\winsrv.dll
2014-01-11 11:49:41 ----A---- C:\Windows\system32\smss.exe
2014-01-11 11:49:41 ----A---- C:\Windows\system32\csrsrv.dll
2014-01-11 11:49:41 ----A---- C:\Windows\system32\conhost.exe
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-01-11 11:49:40 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-01-11 11:49:40 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-01-11 11:49:40 ----A---- C:\Windows\system32\apisetschema.dll
2014-01-11 11:49:37 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-01-11 11:49:36 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-01-11 11:49:36 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-01-11 11:49:36 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-01-11 11:49:36 ----A---- C:\Windows\system32\rdpwsx.dll
2014-01-11 11:49:36 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-01-11 11:49:35 ----A---- C:\Windows\system32\Wdfres.dll
2014-01-11 11:49:35 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-01-11 11:49:35 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-01-11 11:49:34 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-01-11 11:49:34 ----A---- C:\Windows\system32\rpcrt4.dll
2014-01-11 11:49:34 ----A---- C:\Windows\system32\msxml6.dll
2014-01-11 11:49:34 ----A---- C:\Windows\system32\msxml3.dll
2014-01-11 11:49:34 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-01-11 11:49:34 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-01-11 11:49:33 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-01-11 11:49:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-01-11 11:49:33 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-01-11 11:49:33 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-01-11 11:49:33 ----A---- C:\Windows\system32\msxml3r.dll
2014-01-11 11:49:33 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-01-11 11:49:33 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-01-11 11:49:33 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-01-11 11:49:33 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-01-11 11:49:33 ----A---- C:\Windows\system32\dnsapi.dll
2014-01-11 11:49:32 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-01-11 11:48:54 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-01-11 11:48:54 ----A---- C:\Windows\system32\qedit.dll
2014-01-11 11:48:53 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-01-11 11:48:53 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-01-11 11:48:53 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-01-11 11:48:53 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-01-11 11:48:53 ----A---- C:\Windows\system32\drivers\srv.sys
2014-01-11 11:48:53 ----A---- C:\Windows\system32\dpnet.dll
2014-01-11 11:48:52 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-01-11 11:48:52 ----A---- C:\Windows\system32\psisdecd.dll
2014-01-11 11:48:48 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-01-11 11:48:48 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-01-11 11:48:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-01-11 11:48:45 ----A---- C:\Windows\system32\kerberos.dll
2014-01-11 11:48:41 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-01-11 11:48:41 ----A---- C:\Windows\system32\synceng.dll
2014-01-11 11:48:40 ----A---- C:\Windows\system32\winresume.exe
2014-01-11 11:48:40 ----A---- C:\Windows\system32\winload.exe
2014-01-11 11:48:40 ----A---- C:\Windows\system32\kdusb.dll
2014-01-11 11:48:40 ----A---- C:\Windows\system32\kdcom.dll
2014-01-11 11:48:40 ----A---- C:\Windows\system32\kd1394.dll
2014-01-11 11:48:39 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-01-11 11:48:39 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-01-11 11:48:39 ----A---- C:\Windows\system32\shell32.dll
2014-01-11 11:48:39 ----A---- C:\Windows\system32\shdocvw.dll
2014-01-11 11:48:37 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-01-11 11:48:37 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 11:48:37 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-01-11 11:48:37 ----A---- C:\Windows\system32\win32spl.dll
2014-01-11 11:48:37 ----A---- C:\Windows\system32\taskhost.exe
2014-01-11 11:48:37 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-11 11:48:37 ----A---- C:\Windows\system32\gdi32.dll
2014-01-11 11:48:36 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-01-11 11:48:36 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-01-11 11:48:36 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-01-11 11:48:36 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-01-11 11:48:36 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-01-11 11:48:31 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-01-11 11:48:31 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-01-11 11:48:31 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-01-11 11:48:31 ----A---- C:\Windows\system32\netapi32.dll
2014-01-11 11:48:31 ----A---- C:\Windows\system32\inetcomm.dll
2014-01-11 11:48:31 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-01-11 11:48:31 ----A---- C:\Windows\system32\drivers\netio.sys
2014-01-11 11:48:31 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-01-11 11:48:31 ----A---- C:\Windows\system32\browser.dll
2014-01-11 11:48:31 ----A---- C:\Windows\system32\browcli.dll
2014-01-11 11:48:30 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-01-11 11:48:30 ----A---- C:\Windows\system32\msvcrt.dll
2014-01-11 11:48:29 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-01-11 11:48:29 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-01-11 11:48:29 ----A---- C:\Windows\system32\certutil.exe
2014-01-11 11:48:29 ----A---- C:\Windows\system32\certenc.dll
2014-01-11 11:48:26 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-01-11 11:48:26 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-01-11 11:48:26 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-01-11 11:48:26 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-01-11 11:48:26 ----A---- C:\Windows\system32\wscript.exe
2014-01-11 11:48:26 ----A---- C:\Windows\system32\scrrun.dll
2014-01-11 11:48:26 ----A---- C:\Windows\system32\EncDec.dll
2014-01-11 11:48:26 ----A---- C:\Windows\system32\cscript.exe
2014-01-11 11:48:25 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-01-11 11:48:25 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-01-11 11:48:25 ----A---- C:\Windows\system32\oleaut32.dll
2014-01-11 11:48:25 ----A---- C:\Windows\system32\oleacc.dll
2014-01-11 11:48:25 ----A---- C:\Windows\system32\localspl.dll
2014-01-11 11:48:25 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-01-11 11:48:24 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-01-11 11:48:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-01-11 11:48:24 ----A---- C:\Windows\system32\cdd.dll
2014-01-11 11:48:21 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-01-11 11:48:21 ----A---- C:\Windows\system32\cdosys.dll
2014-01-11 11:47:51 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-01-11 11:47:51 ----A---- C:\Windows\system32\packager.dll
2014-01-11 11:46:38 ----D---- C:\FRST
2014-01-11 11:43:08 ----A---- C:\Windows\system32\browserchoice.exe
2014-01-11 11:43:05 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\wmi.dll
2014-01-11 11:43:05 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-01-10 23:01:33 ----D---- C:\Windows\Prefetch
2014-01-10 23:01:25 ----SHD---- C:\System Volume Information
2014-01-10 23:01:25 ----ASH---- C:\pagefile.sys
2014-01-10 23:01:25 ----ASH---- C:\hiberfil.sys
2014-01-10 23:00:47 ----D---- C:\Windows\Panther
2014-01-10 21:18:40 ----D---- C:\Program Files\Adobe
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files\Adobe
2014-01-10 21:07:27 ----D---- C:\Users\Ondra\AppData\Roaming\eCyber
2014-01-10 21:07:23 ----D---- C:\Windows\system32\log
2014-01-10 20:11:59 ----D---- C:\Users\Ondra\AppData\Roaming\FishtroneDesktop
2014-01-10 20:04:24 ----D---- C:\Users\Ondra\AppData\Roaming\TortoiseSVN
2014-01-10 19:46:03 ----D---- C:\ProgramData\Samsung
2014-01-10 19:46:03 ----D---- C:\Program Files (x86)\Samsung Magician
2014-01-10 19:37:10 ----D---- C:\Users\Ondra\AppData\Roaming\ShoeBox
2014-01-10 19:34:12 ----A---- C:\openssl.exe
2014-01-10 19:10:02 ----D---- C:\Windows\SYSWOW64\Macromed
2014-01-10 19:10:02 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-01-10 19:09:58 ----D---- C:\Windows\system32\Macromed
2014-01-10 19:06:29 ----D---- C:\Users\Ondra\AppData\Roaming\Mozilla
2014-01-10 19:06:22 ----D---- C:\ProgramData\Mozilla
2014-01-10 19:06:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-10 19:06:20 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-01-10 18:40:43 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-01-10 18:29:01 ----D---- C:\ProgramData\Oracle
2014-01-10 18:18:59 ----D---- C:\Users\Ondra\AppData\Roaming\Subversion
2014-01-10 18:08:36 ----D---- C:\Program Files\TortoiseSVN
2014-01-10 18:08:36 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2014-01-10 18:03:47 ----D---- C:\Program Files (x86)\totalcmd
2014-01-10 17:52:28 ----A---- C:\Windows\SYSWOW64\Config.json
2014-01-10 17:19:21 ----A---- C:\Windows\SYSWOW64\rp.dll
2014-01-10 17:14:10 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelOpenCL32.dll
2014-01-10 17:12:25 ----A---- C:\Windows\SYSWOW64\IntelCpHeciSvc.exe
2014-01-10 17:12:25 ----A---- C:\Windows\system32\OpenCL.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\IntelOpenCL64.dll
2014-01-10 17:12:25 ----A---- C:\Windows\system32\igfxCoIn_v2696.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmrt32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\SYSWOW64\igfxcmjit32.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhsip64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\iglhcp64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxtray.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxTMM.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxsrvc.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxress.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpph.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxpers.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxext.exe
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxexps.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdo.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxdev.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmrt64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igfxcmjit64.dll
2014-01-10 17:12:24 ----A---- C:\Windows\system32\igdumd64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdumd32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdrcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdfcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdde32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\SYSWOW64\igdbcl32.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdrcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdfcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdde64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\igdbcl64.dll
2014-01-10 17:12:23 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\SYSWOW64\ig7icd32.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\igd10umd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\ig7icd64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hkcmd.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\hccutils.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe.config
2014-01-10 17:12:22 ----A---- C:\Windows\system32\GfxUI.exe
2014-01-10 17:12:22 ----A---- C:\Windows\system32\gfxSrvc.dll
2014-01-10 17:12:22 ----A---- C:\Windows\system32\difx64.exe
2014-01-10 16:53:40 ----D---- C:\Users\Ondra\AppData\Roaming\WinRAR
2014-01-10 16:22:25 ----D---- C:\Program Files (x86)\ShopperPro
2014-01-10 16:21:45 ----D---- C:\Program Files\DCE
2014-01-10 16:20:21 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-01-10 15:38:14 ----D---- C:\Users\Ondra\AppData\Roaming\AVAST Software
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-01-10 15:37:11 ----A---- C:\Windows\system32\aswBoot.exe
2014-01-10 15:37:00 ----D---- C:\Program Files\AVAST Software
2014-01-10 15:36:54 ----D---- C:\ProgramData\AVAST Software
2014-01-10 15:35:05 ----D---- C:\Program Files (x86)\LibreOffice 4
2014-01-10 15:29:08 ----D---- C:\Users\Ondra\AppData\Roaming\Apple Computer
2014-01-10 15:29:07 ----DC---- C:\Windows\system32\DRVSTORE
2014-01-10 15:29:07 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-01-10 15:29:03 ----D---- C:\ProgramData\Apple Computer
2014-01-10 15:29:03 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-10 15:29:03 ----D---- C:\Program Files\iTunes
2014-01-10 15:29:03 ----D---- C:\Program Files\iPod
2014-01-10 15:29:03 ----D---- C:\Program Files (x86)\iTunes
2014-01-10 15:28:57 ----D---- C:\Program Files\Common Files\Apple
2014-01-10 15:28:56 ----D---- C:\Program Files (x86)\Apple Software Update
2014-01-10 15:28:53 ----D---- C:\Program Files\Bonjour
2014-01-10 15:28:53 ----D---- C:\Program Files (x86)\Bonjour
2014-01-10 15:28:50 ----D---- C:\ProgramData\Apple
2014-01-10 15:25:52 ----D---- C:\Users\Ondra\AppData\Roaming\DropboxMaster
2014-01-10 15:25:36 ----D---- C:\Users\Ondra\AppData\Roaming\Dropbox
2014-01-10 15:24:47 ----RD---- C:\Program Files (x86)\Skype
2014-01-10 15:24:45 ----D---- C:\ProgramData\Skype
2014-01-10 15:24:16 ----D---- C:\Program Files (x86)\VideoLAN
2014-01-10 15:23:41 ----D---- C:\Program Files (x86)\Audacity
2014-01-10 15:22:51 ----D---- C:\Program Files\WinRAR
2014-01-10 15:22:48 ----A---- C:\Windows\system32\javaws.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-10 15:22:47 ----A---- C:\Windows\system32\javaw.exe
2014-01-10 15:22:47 ----A---- C:\Windows\system32\java.exe
2014-01-10 15:22:45 ----D---- C:\Program Files\Java
2014-01-10 15:22:12 ----D---- C:\ProgramData\Sun
2014-01-10 15:22:12 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-01-10 15:22:11 ----A---- C:\Windows\SYSWOW64\java.exe
2014-01-10 15:22:08 ----D---- C:\Program Files (x86)\Java
2014-01-10 15:21:46 ----D---- C:\Users\Ondra\AppData\Roaming\Macromedia
2014-01-10 15:21:46 ----D---- C:\ProgramData\Adobe
2014-01-10 15:21:46 ----D---- C:\Program Files (x86)\Adobe
2014-01-10 15:21:45 ----D---- C:\Users\Ondra\AppData\Roaming\Adobe
2014-01-10 15:21:08 ----D---- C:\Program Files\Microsoft Silverlight
2014-01-10 15:21:08 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-01-10 15:14:52 ----D---- C:\Program Files (x86)\Google
2014-01-10 15:07:14 ----D---- C:\ProgramData\USBChargerPlus
2014-01-10 15:05:09 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\rdpcore.dll
2014-01-10 15:05:09 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-01-10 15:05:03 ----D---- C:\Program Files\DIFX
2014-01-10 15:01:55 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wups2.dll
2014-01-10 15:00:05 ----A---- C:\Windows\system32\wuauclt.exe
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wucltux.dll
2014-01-10 15:00:04 ----A---- C:\Windows\system32\wuaueng.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wups.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wudriver.dll
2014-01-10 15:00:03 ----A---- C:\Windows\system32\wuapi.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuwebv.dll
2014-01-10 15:00:02 ----A---- C:\Windows\system32\wuapp.exe
2014-01-10 14:59:11 ----HD---- C:\Windows\system32\WLANProfiles
2014-01-10 14:59:03 ----D---- C:\Users\Ondra\AppData\Roaming\Intel
2014-01-10 14:58:57 ----D---- C:\ProgramData\Roaming
2014-01-10 14:58:23 ----D---- C:\ProgramData\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files\Common Files\Intel
2014-01-10 14:58:23 ----D---- C:\Program Files (x86)\Cisco
2014-01-10 14:57:24 ----D---- C:\Program Files\NVIDIA Corporation
2014-01-10 14:57:03 ----A---- C:\Windows\system32\drivers\AiCharger.sys
2014-01-10 14:56:35 ----A---- C:\Windows\system32\drivers\USB3Ver.dll
2014-01-10 14:56:18 ----D---- C:\Program Files\Intel
2014-01-10 14:56:10 ----D---- C:\Users\Ondra\AppData\Roaming\InstallShield
2014-01-10 14:55:33 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-01-10 14:54:52 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2014-01-10 14:54:04 ----D---- C:\Program Files (x86)\Intel
2014-01-10 14:54:04 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-01-10 14:53:50 ----D---- C:\Intel
2014-01-10 14:53:39 ----D---- C:\ProgramData\AmUStor
2014-01-10 14:53:39 ----D---- C:\Program Files (x86)\AmIcoSingLun
2014-01-10 14:52:53 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-01-10 14:52:53 ----D---- C:\Program Files\Realtek
2014-01-10 14:52:48 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tosade.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tepeqapo64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo264.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\tadefxapo.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SRSHP64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFNHK64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFCOM64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\SFAPO64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-01-10 14:52:48 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-01-10 14:52:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 14:52:47 ----D---- C:\Program Files (x86)\Realtek
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RtkApi64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTEED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RTCOM64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EED64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\KAAPORT64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\FMAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PREC64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PLFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSU2PGFX64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAR64.dll
2014-01-10 14:52:47 ----A---- C:\Windows\system32\AERTAC64.dll
2014-01-10 14:52:43 ----HD---- C:\Program Files (x86)\Temp
2014-01-10 14:52:43 ----A---- C:\Windows\RtlExUpd.dll
2014-01-10 14:51:48 ----D---- C:\Program Files (x86)\ASUS
2014-01-10 14:51:33 ----SHD---- C:\Windows\Installer
2014-01-10 14:05:44 ----D---- C:\Users\Ondra\AppData\Roaming\Identities
2014-01-10 14:05:40 ----D---- C:\Users\Ondra\AppData\Roaming\Media Center Programs
2014-01-10 14:05:39 ----SD---- C:\Users\Ondra\AppData\Roaming\Microsoft
2014-01-10 14:04:59 ----D---- C:\Windows\SYSWOW64\Wat
2014-01-10 14:04:59 ----D---- C:\Windows\system32\Wat
2014-01-10 14:04:53 ----SHD---- C:\Recovery
2014-01-10 14:04:51 ----D---- C:\Windows\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2014-01-11 18:33:46 ----D---- C:\Windows\Temp
2014-01-11 18:32:20 ----D---- C:\Windows\Microsoft.NET
2014-01-11 18:32:11 ----RSD---- C:\Windows\assembly
2014-01-11 18:32:02 ----RD---- C:\Program Files (x86)
2014-01-11 18:32:02 ----D---- C:\Windows\Tasks
2014-01-11 18:29:04 ----D---- C:\Windows\winsxs
2014-01-11 18:27:46 ----D---- C:\Windows\system32\config
2014-01-11 18:27:40 ----D---- C:\Windows\System32
2014-01-11 18:27:05 ----D---- C:\Windows\SYSWOW64\migration
2014-01-11 18:27:05 ----D---- C:\Windows\SYSWOW64\en-US
2014-01-11 18:27:05 ----D---- C:\Windows\SysWOW64
2014-01-11 18:27:05 ----D---- C:\Program Files\Common Files\System
2014-01-11 18:27:04 ----RSD---- C:\Windows\Fonts
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\it-IT
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-01-11 18:27:04 ----D---- C:\Windows\SYSWOW64\el-GR
2014-01-11 18:27:04 ----D---- C:\Windows\system32\migration
2014-01-11 18:27:04 ----D---- C:\Windows\system32\en-US
2014-01-11 18:27:04 ----D---- C:\Windows\system32\drivers
2014-01-11 18:27:04 ----D---- C:\Windows\PolicyDefinitions
2014-01-11 18:27:04 ----D---- C:\Windows\inf
2014-01-11 18:27:04 ----D---- C:\Windows\AppPatch
2014-01-11 18:27:04 ----D---- C:\Program Files\Internet Explorer
2014-01-11 18:27:04 ----D---- C:\Program Files (x86)\Internet Explorer
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\es-ES
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\de-DE
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\da-DK
2014-01-11 18:27:03 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-01-11 18:27:03 ----D---- C:\Windows\system32\zh-TW
2014-01-11 18:27:03 ----D---- C:\Windows\system32\zh-HK
2014-01-11 18:27:03 ----D---- C:\Windows\system32\zh-CN
2014-01-11 18:27:03 ----D---- C:\Windows\system32\tr-TR
2014-01-11 18:27:03 ----D---- C:\Windows\system32\sv-SE
2014-01-11 18:27:03 ----D---- C:\Windows\system32\ru-RU
2014-01-11 18:27:03 ----D---- C:\Windows\system32\pt-PT
2014-01-11 18:27:03 ----D---- C:\Windows\system32\pt-BR
2014-01-11 18:27:03 ----D---- C:\Windows\system32\pl-PL
2014-01-11 18:27:03 ----D---- C:\Windows\system32\nl-NL
2014-01-11 18:27:03 ----D---- C:\Windows\system32\nb-NO
2014-01-11 18:27:03 ----D---- C:\Windows\system32\ko-KR
2014-01-11 18:27:03 ----D---- C:\Windows\system32\ja-JP
2014-01-11 18:27:03 ----D---- C:\Windows\system32\it-IT
2014-01-11 18:27:03 ----D---- C:\Windows\system32\hu-HU
2014-01-11 18:27:03 ----D---- C:\Windows\system32\fr-FR
2014-01-11 18:27:03 ----D---- C:\Windows\system32\fi-FI
2014-01-11 18:27:03 ----D---- C:\Windows\system32\es-ES
2014-01-11 18:27:03 ----D---- C:\Windows\system32\el-GR
2014-01-11 18:27:03 ----D---- C:\Windows\system32\de-DE
2014-01-11 18:27:03 ----D---- C:\Windows\system32\da-DK
2014-01-11 18:27:03 ----D---- C:\Windows\system32\cs-CZ
2014-01-11 18:27:03 ----D---- C:\Windows\ehome
2014-01-11 18:27:02 ----D---- C:\Windows\system32\wbem
2014-01-11 18:27:02 ----D---- C:\Program Files\Windows Defender
2014-01-11 18:27:02 ----D---- C:\Program Files (x86)\Windows Defender
2014-01-11 18:27:00 ----D---- C:\Windows\system32\Boot
2014-01-11 18:27:00 ----D---- C:\Program Files\Windows Journal
2014-01-11 18:26:57 ----D---- C:\Windows\system32\DriverStore
2014-01-11 18:16:12 ----D---- C:\Windows\Logs
2014-01-11 17:56:19 ----D---- C:\Windows\system32\catroot
2014-01-11 17:55:39 ----D---- C:\Windows
2014-01-11 17:09:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-11 12:22:52 ----D---- C:\Windows\system32\catroot2
2014-01-11 11:50:47 ----RD---- C:\Program Files
2014-01-11 00:21:48 ----D---- C:\Windows\system32\drivers\UMDF
2014-01-10 23:04:17 ----D---- C:\Windows\rescache
2014-01-10 23:04:16 ----D---- C:\Windows\debug
2014-01-10 23:03:24 ----D---- C:\Windows\system32\oobe
2014-01-10 23:02:29 ----D---- C:\Windows\system32\sysprep
2014-01-10 23:01:32 ----D---- C:\Windows\CSC
2014-01-10 23:00:27 ----D---- C:\Windows\Setup
2014-01-10 22:05:24 ----D---- C:\Windows\system32\Tasks
2014-01-10 21:17:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-01-10 21:17:38 ----D---- C:\Program Files\Common Files
2014-01-10 21:11:51 ----D---- C:\Windows\system32\wdi
2014-01-10 19:46:03 ----HD---- C:\ProgramData
2014-01-10 18:08:37 ----D---- C:\Program Files (x86)\Common Files
2014-01-10 15:21:43 ----SD---- C:\ProgramData\Microsoft
2014-01-10 14:57:02 ----D---- C:\Windows\SYSWOW64\drivers
2014-01-10 14:15:36 ----D---- C:\Windows\system32\CodeIntegrity
2014-01-10 14:11:43 ----D---- C:\Windows\system32\NDF
2014-01-10 14:05:43 ----SHD---- C:\$Recycle.Bin
2014-01-10 14:05:39 ----RD---- C:\Users
2014-01-10 14:05:01 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\user32.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\systemcpl.dll
2014-01-10 14:05:01 ----A---- C:\Windows\system32\slwga.dll
2014-01-10 14:05:00 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-01-10 14:04:55 ----D---- C:\Windows\system32\restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-01-10 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-10 207904]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-27 19224]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2014-01-10 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-10 1034464]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-10 422216]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-10 78648]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2012-01-20 16128]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-02-29 17152]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2012-01-09 195584]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-01-10 79672]
R3 ATP;ASUS PS/2 Port Input Device; C:\Windows\system32\DRIVERS\AsusTP.sys [2012-09-11 56704]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-21 80384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-04-02 14745600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-07-10 4083600]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-27 356632]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-27 789272]
R3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-01-16 103536]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys [2012-03-12 11471872]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys []
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2012-01-09 195584]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2010-11-21 552448]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-10 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DCE;Distributed Computing Experiment; C:\Program Files\DCE\dce.exe [2013-12-18 59392]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]
R2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2012-03-29 2669840]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-17 135952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 iSafeService;iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-04-02 276248]
S3 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-06 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-01-11 111616]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.5; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2012-01-20 149504]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-01-10 1255736]

-----------------EOF-----------------

Smazáno. Nastala nějaká změna?

Vypadá to dobře, další problémy jsem nazaznamenal. Dík

Nemáte zač!