Prosím o kontrolu.Eset inline scanner odhalil 9 šmejdů
Napsal: 07 bře 2014 20:54
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jindra M5010 at 2014-03-07 20:58:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 554 GB (91%) free of 610 GB
Total RAM: 3068 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:58:47, on 7.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jindra M5010.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6717 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 4585248
\??\C:\Windows\system32\conhost.exe "-747076319-1280302022-44067458876209523-9528570861680894342-3584535641789671228
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Jindra M5010\Desktop\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1426990389-4112388810-2468997887-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1426990389-4112388810-2468997887-1000UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Jindra M5010\AppData\Roaming\Mozilla\Firefox\Profiles\0b6z5ab5.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
C:\Users\Jindra M5010\AppData\Roaming\Mozilla\Firefox\Profiles\0b6z5ab5.default\extensions\
centrumpomocnik@centrum.cz
{ea614400-e918-4741-9a97-7a972ff7c30b}
{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2013-08-11 6301696]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clarus Drive Manager]
C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Jindra M5010\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Jindra M5010\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Jindra M5010\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-08-11 138096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe -delayrun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnccfrpSrv]
C:\Windows\inf\mnccfrp.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnchifucrSrv]
C:\Windows\inf\mnchifucr.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msrwetwSrv]
C:\Windows\system32\msrwetw.vbe msdgmpg msiscd []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSStp]
C:\Windows\system32\msstp.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NextLive]
C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-01-14 20728480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-15 2247976]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
C:\Program Files (x86)\AVG Secure Search\vprot.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebcamMaxAutoRun]
C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^hpzrcv01.LNK]
C:\PROGRA~2\HP\Temp\{C916D~1\setup\hpzstub.exe -run C:\Program Files (x86)\HP\Temp\{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}\setup\hpzrcv01.exe -f ..\autorun.inf -recover []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk]
C:\PROGRA~2\Clarus\SAMSUN~1\ABRTMon.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk]
C:\PROGRA~2\Secunia\PSI\psi_tray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jindra M5010^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE []
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe ARM^32*Registry: HKLM:RUN]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe^Registry: HKCU:RUN]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\RegClean Expert Scheduler^Registry: HKCU:RUN]
C:\Program Files (x86)\Registry Clean Expert\RCHelper.exe /startup []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-03-07 20:30:08 ----D---- C:\Program Files\trend micro
2014-03-07 20:30:07 ----D---- C:\rsit
2014-02-28 20:05:17 ----D---- C:\Users\Jindra M5010\AppData\Roaming\newnext.me
2014-02-28 20:04:42 ----D---- C:\Program Files (x86)\Mobogenie
2014-02-28 20:03:56 ----D---- C:\Users\Jindra M5010\AppData\Roaming\OpenCandy
2014-02-28 00:18:49 ----D---- C:\Program Files (x86)\Microsoft Office
2014-02-27 23:51:13 ----A---- C:\Windows\KMSEmulator.exe
2014-02-25 19:21:05 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-02-25 19:21:05 ----A---- C:\Windows\system32\mstscax.dll
2014-02-20 19:59:05 ----D---- C:\ProgramData\Microsoft Help
2014-02-19 23:58:44 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 23:58:41 ----A---- C:\Windows\system32\tsgqec.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-19 23:58:40 ----A---- C:\Windows\system32\wksprtPS.dll
2014-02-19 23:58:40 ----A---- C:\Windows\system32\wksprt.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\mstsc.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 23:58:39 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-02-19 23:58:39 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-02-19 23:57:31 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-02-19 23:57:31 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-02-19 23:05:54 ----AS---- C:\Windows\SYSWOW64\nircmdc.exe
2014-02-19 19:57:38 ----D---- C:\Program Files (x86)\Domácí Hospodářství plus
2014-02-19 19:04:42 ----D---- C:\Program Files (x86)\DUCTO
2014-02-19 18:01:33 ----D---- C:\apache
2014-02-17 13:23:07 ----D---- C:\Users\Jindra M5010\AppData\Roaming\MechCAD
2014-02-14 22:48:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:59:24 ----D---- C:\ProgramData\TamoSoft
2014-02-14 19:59:18 ----D---- C:\Program Files (x86)\CommViewWiFi
2014-02-13 21:20:44 ----D---- C:\ProgramData\VS Revo Group
2014-02-12 23:47:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-12 23:47:39 ----A---- C:\Windows\system32\vbscript.dll
2014-02-12 23:46:52 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-12 23:46:52 ----A---- C:\Windows\system32\msrating.dll
2014-02-12 23:46:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-12 23:46:51 ----A---- C:\Windows\system32\ieui.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\iernonce.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-12 23:46:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-12 23:46:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-12 23:46:48 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-12 23:46:47 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-12 23:46:47 ----A---- C:\Windows\system32\iesetup.dll
2014-02-12 23:46:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-12 23:46:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-12 23:46:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-12 23:46:45 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-12 23:46:45 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\mshtml.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-12 23:46:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-12 23:46:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-12 23:46:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\wininet.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\urlmon.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\iertutil.dll
2014-02-12 23:46:41 ----A---- C:\Windows\system32\ieframe.dll
2014-02-12 23:46:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-12 23:46:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-12 23:46:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-12 23:46:36 ----A---- C:\Windows\system32\jscript9.dll
2014-02-12 15:05:13 ----A---- C:\Windows\system32\msxml3.dll
2014-02-12 15:05:12 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-12 15:05:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-12 15:05:12 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-12 15:04:59 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-12 15:04:59 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-12 15:04:57 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-12 15:04:57 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 15:04:57 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 15:04:56 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\secproc.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\msdrm.dll
2014-02-12 15:04:54 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-12 15:04:54 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-12 15:04:53 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-12 15:04:53 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-12 15:04:53 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 15:04:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-12 15:04:50 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-12 15:04:50 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-12 15:04:49 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-12 15:04:49 ----A---- C:\Windows\system32\d2d1.dll
======List of files/folders modified in the last 1 month======
2014-03-07 20:58:01 ----D---- C:\Windows\SysWOW64
2014-03-07 20:58:00 ----D---- C:\Windows\inf
2014-03-07 20:42:26 ----D---- C:\Windows\Temp
2014-03-07 20:30:08 ----RD---- C:\Program Files
2014-03-07 18:19:07 ----D---- C:\Windows\system32\config
2014-03-07 17:38:39 ----AD---- C:\Windows\System32
2014-03-07 17:38:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-07 07:44:06 ----AD---- C:\Windows
2014-03-05 18:37:27 ----SHD---- C:\System Volume Information
2014-03-05 18:28:37 ----D---- C:\Windows\SoftwareDistribution
2014-03-03 18:07:28 ----D---- C:\Windows\system32\catroot2
2014-02-28 22:41:09 ----SHD---- C:\Windows\Installer
2014-02-28 22:41:09 ----HD---- C:\Config.Msi
2014-02-28 22:38:48 ----A---- C:\Windows\win.ini
2014-02-28 21:33:02 ----D---- C:\Windows\Microsoft.NET
2014-02-28 21:33:01 ----RSD---- C:\Windows\assembly
2014-02-28 20:04:54 ----D---- C:\Windows\system32\wbem
2014-02-28 20:04:42 ----RD---- C:\Program Files (x86)
2014-02-28 00:20:31 ----A---- C:\Windows\ODBC.INI
2014-02-28 00:19:35 ----D---- C:\Windows\ShellNew
2014-02-28 00:19:29 ----D---- C:\Program Files (x86)\Common Files
2014-02-28 00:18:58 ----RSD---- C:\Windows\Fonts
2014-02-28 00:17:08 ----D---- C:\Windows\system
2014-02-28 00:12:54 ----SD---- C:\ProgramData\Microsoft
2014-02-28 00:12:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-02-28 00:12:54 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-02-28 00:11:14 ----D---- C:\Program Files (x86)\MSBuild
2014-02-28 00:11:10 ----D---- C:\Program Files\Common Files
2014-02-28 00:10:01 ----D---- C:\Program Files\Common Files\System
2014-02-27 15:01:24 ----D---- C:\Program Files\CCleaner
2014-02-27 11:08:53 ----D---- C:\Windows\rescache
2014-02-26 23:04:35 ----SD---- C:\Users\Jindra M5010\AppData\Roaming\Microsoft
2014-02-25 19:26:20 ----D---- C:\Windows\winsxs
2014-02-25 19:26:16 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-25 19:26:16 ----D---- C:\Windows\system32\cs-CZ
2014-02-25 19:18:55 ----D---- C:\Windows\system32\catroot
2014-02-23 22:19:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-20 20:04:28 ----D---- C:\Windows\system32\Tasks
2014-02-20 19:59:05 ----HD---- C:\ProgramData
2014-02-20 19:55:11 ----D---- C:\Windows\Help
2014-02-19 23:59:23 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-19 23:59:23 ----D---- C:\Windows\system32\DriverStore
2014-02-19 23:59:23 ----D---- C:\Windows\system32\drivers\en-US
2014-02-19 23:59:23 ----D---- C:\Windows\system32\drivers
2014-02-19 23:37:04 ----D---- C:\Windows\IME
2014-02-16 14:42:42 ----D---- C:\Program Files\Defraggler
2014-02-16 14:39:52 ----D---- C:\Windows\debug
2014-02-16 12:12:21 ----D---- C:\Windows\system32\MRT
2014-02-16 12:05:49 ----A---- C:\Windows\system32\MRT.exe
2014-02-16 02:01:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 22:56:36 ----D---- C:\Users\Jindra M5010\AppData\Roaming\Skype
2014-02-13 19:42:09 ----RD---- C:\Program Files (x86)\Skype
2014-02-13 19:42:01 ----D---- C:\ProgramData\Skype
2014-02-12 23:54:49 ----D---- C:\Program Files\Internet Explorer
2014-02-12 23:54:49 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-12 23:49:39 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2013-08-11 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2013-08-11 4716608]
R3 hswpan;WPAN Driver; C:\Windows\system32\DRIVERS\hswpan.sys [2011-12-07 108288]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-07-15 1381936]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2010-09-30 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2010-09-30 180736]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-11-11 232480]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-01-03 1363616]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-01-03 1748640]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2013-08-11 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-23 257928]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-14 118896]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-11 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Run by Jindra M5010 at 2014-03-07 20:58:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 554 GB (91%) free of 610 GB
Total RAM: 3068 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:58:47, on 7.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jindra M5010.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6717 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 4585248
\??\C:\Windows\system32\conhost.exe "-747076319-1280302022-44067458876209523-9528570861680894342-3584535641789671228
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Jindra M5010\Desktop\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1426990389-4112388810-2468997887-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1426990389-4112388810-2468997887-1000UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Jindra M5010\AppData\Roaming\Mozilla\Firefox\Profiles\0b6z5ab5.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
C:\Users\Jindra M5010\AppData\Roaming\Mozilla\Firefox\Profiles\0b6z5ab5.default\extensions\
centrumpomocnik@centrum.cz
{ea614400-e918-4741-9a97-7a972ff7c30b}
{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2013-08-11 6301696]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clarus Drive Manager]
C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Jindra M5010\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Jindra M5010\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]
C:\Users\Jindra M5010\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-08-11 138096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe -delayrun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Download Assistant]
C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnccfrpSrv]
C:\Windows\inf\mnccfrp.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mnchifucrSrv]
C:\Windows\inf\mnchifucr.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msrwetwSrv]
C:\Windows\system32\msrwetw.vbe msdgmpg msiscd []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSStp]
C:\Windows\system32\msstp.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NextLive]
C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-01-14 20728480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-15 2247976]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
C:\Program Files (x86)\AVG Secure Search\vprot.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebcamMaxAutoRun]
C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^hpzrcv01.LNK]
C:\PROGRA~2\HP\Temp\{C916D~1\setup\hpzstub.exe -run C:\Program Files (x86)\HP\Temp\{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}\setup\hpzrcv01.exe -f ..\autorun.inf -recover []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~3\Office10\OSA.EXE [2001-02-13 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk]
C:\PROGRA~2\Clarus\SAMSUN~1\ABRTMon.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk]
C:\PROGRA~2\Secunia\PSI\psi_tray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jindra M5010^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE []
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe ARM^32*Registry: HKLM:RUN]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe^Registry: HKCU:RUN]
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\RegClean Expert Scheduler^Registry: HKCU:RUN]
C:\Program Files (x86)\Registry Clean Expert\RCHelper.exe /startup []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-03-07 20:30:08 ----D---- C:\Program Files\trend micro
2014-03-07 20:30:07 ----D---- C:\rsit
2014-02-28 20:05:17 ----D---- C:\Users\Jindra M5010\AppData\Roaming\newnext.me
2014-02-28 20:04:42 ----D---- C:\Program Files (x86)\Mobogenie
2014-02-28 20:03:56 ----D---- C:\Users\Jindra M5010\AppData\Roaming\OpenCandy
2014-02-28 00:18:49 ----D---- C:\Program Files (x86)\Microsoft Office
2014-02-27 23:51:13 ----A---- C:\Windows\KMSEmulator.exe
2014-02-25 19:21:05 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-02-25 19:21:05 ----A---- C:\Windows\system32\mstscax.dll
2014-02-20 19:59:05 ----D---- C:\ProgramData\Microsoft Help
2014-02-19 23:58:44 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 23:58:41 ----A---- C:\Windows\system32\tsgqec.dll
2014-02-19 23:58:41 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-02-19 23:58:40 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-19 23:58:40 ----A---- C:\Windows\system32\wksprtPS.dll
2014-02-19 23:58:40 ----A---- C:\Windows\system32\wksprt.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\mstsc.exe
2014-02-19 23:58:40 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 23:58:39 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-02-19 23:58:39 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-02-19 23:57:31 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-02-19 23:57:31 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-02-19 23:05:54 ----AS---- C:\Windows\SYSWOW64\nircmdc.exe
2014-02-19 19:57:38 ----D---- C:\Program Files (x86)\Domácí Hospodářství plus
2014-02-19 19:04:42 ----D---- C:\Program Files (x86)\DUCTO
2014-02-19 18:01:33 ----D---- C:\apache
2014-02-17 13:23:07 ----D---- C:\Users\Jindra M5010\AppData\Roaming\MechCAD
2014-02-14 22:48:29 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-02-14 19:59:24 ----D---- C:\ProgramData\TamoSoft
2014-02-14 19:59:18 ----D---- C:\Program Files (x86)\CommViewWiFi
2014-02-13 21:20:44 ----D---- C:\ProgramData\VS Revo Group
2014-02-12 23:47:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-12 23:47:39 ----A---- C:\Windows\system32\vbscript.dll
2014-02-12 23:46:52 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-12 23:46:52 ----A---- C:\Windows\system32\msrating.dll
2014-02-12 23:46:51 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-12 23:46:51 ----A---- C:\Windows\system32\ieui.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\iernonce.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 23:46:50 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-12 23:46:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-12 23:46:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-12 23:46:48 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-12 23:46:47 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-12 23:46:47 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-12 23:46:47 ----A---- C:\Windows\system32\iesetup.dll
2014-02-12 23:46:46 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-12 23:46:46 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-12 23:46:46 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-12 23:46:45 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-12 23:46:45 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\mshtml.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-12 23:46:45 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-12 23:46:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-12 23:46:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-12 23:46:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\wininet.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\urlmon.dll
2014-02-12 23:46:43 ----A---- C:\Windows\system32\iertutil.dll
2014-02-12 23:46:41 ----A---- C:\Windows\system32\ieframe.dll
2014-02-12 23:46:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-12 23:46:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-12 23:46:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-12 23:46:36 ----A---- C:\Windows\system32\jscript9.dll
2014-02-12 15:05:13 ----A---- C:\Windows\system32\msxml3.dll
2014-02-12 15:05:12 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-12 15:05:12 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-12 15:05:12 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-12 15:04:59 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-12 15:04:59 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-12 15:04:58 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-12 15:04:57 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-12 15:04:57 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 15:04:57 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 15:04:56 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\secproc.dll
2014-02-12 15:04:56 ----A---- C:\Windows\system32\msdrm.dll
2014-02-12 15:04:54 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-12 15:04:54 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-12 15:04:53 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-12 15:04:53 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-12 15:04:53 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 15:04:53 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-12 15:04:50 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-12 15:04:50 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-12 15:04:49 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-12 15:04:49 ----A---- C:\Windows\system32\d2d1.dll
======List of files/folders modified in the last 1 month======
2014-03-07 20:58:01 ----D---- C:\Windows\SysWOW64
2014-03-07 20:58:00 ----D---- C:\Windows\inf
2014-03-07 20:42:26 ----D---- C:\Windows\Temp
2014-03-07 20:30:08 ----RD---- C:\Program Files
2014-03-07 18:19:07 ----D---- C:\Windows\system32\config
2014-03-07 17:38:39 ----AD---- C:\Windows\System32
2014-03-07 17:38:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-07 07:44:06 ----AD---- C:\Windows
2014-03-05 18:37:27 ----SHD---- C:\System Volume Information
2014-03-05 18:28:37 ----D---- C:\Windows\SoftwareDistribution
2014-03-03 18:07:28 ----D---- C:\Windows\system32\catroot2
2014-02-28 22:41:09 ----SHD---- C:\Windows\Installer
2014-02-28 22:41:09 ----HD---- C:\Config.Msi
2014-02-28 22:38:48 ----A---- C:\Windows\win.ini
2014-02-28 21:33:02 ----D---- C:\Windows\Microsoft.NET
2014-02-28 21:33:01 ----RSD---- C:\Windows\assembly
2014-02-28 20:04:54 ----D---- C:\Windows\system32\wbem
2014-02-28 20:04:42 ----RD---- C:\Program Files (x86)
2014-02-28 00:20:31 ----A---- C:\Windows\ODBC.INI
2014-02-28 00:19:35 ----D---- C:\Windows\ShellNew
2014-02-28 00:19:29 ----D---- C:\Program Files (x86)\Common Files
2014-02-28 00:18:58 ----RSD---- C:\Windows\Fonts
2014-02-28 00:17:08 ----D---- C:\Windows\system
2014-02-28 00:12:54 ----SD---- C:\ProgramData\Microsoft
2014-02-28 00:12:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-02-28 00:12:54 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-02-28 00:11:14 ----D---- C:\Program Files (x86)\MSBuild
2014-02-28 00:11:10 ----D---- C:\Program Files\Common Files
2014-02-28 00:10:01 ----D---- C:\Program Files\Common Files\System
2014-02-27 15:01:24 ----D---- C:\Program Files\CCleaner
2014-02-27 11:08:53 ----D---- C:\Windows\rescache
2014-02-26 23:04:35 ----SD---- C:\Users\Jindra M5010\AppData\Roaming\Microsoft
2014-02-25 19:26:20 ----D---- C:\Windows\winsxs
2014-02-25 19:26:16 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-25 19:26:16 ----D---- C:\Windows\system32\cs-CZ
2014-02-25 19:18:55 ----D---- C:\Windows\system32\catroot
2014-02-23 22:19:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-20 20:04:28 ----D---- C:\Windows\system32\Tasks
2014-02-20 19:59:05 ----HD---- C:\ProgramData
2014-02-20 19:55:11 ----D---- C:\Windows\Help
2014-02-19 23:59:23 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-19 23:59:23 ----D---- C:\Windows\system32\DriverStore
2014-02-19 23:59:23 ----D---- C:\Windows\system32\drivers\en-US
2014-02-19 23:59:23 ----D---- C:\Windows\system32\drivers
2014-02-19 23:37:04 ----D---- C:\Windows\IME
2014-02-16 14:42:42 ----D---- C:\Program Files\Defraggler
2014-02-16 14:39:52 ----D---- C:\Windows\debug
2014-02-16 12:12:21 ----D---- C:\Windows\system32\MRT
2014-02-16 12:05:49 ----A---- C:\Windows\system32\MRT.exe
2014-02-16 02:01:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 22:56:36 ----D---- C:\Users\Jindra M5010\AppData\Roaming\Skype
2014-02-13 19:42:09 ----RD---- C:\Program Files (x86)\Skype
2014-02-13 19:42:01 ----D---- C:\ProgramData\Skype
2014-02-12 23:54:49 ----D---- C:\Program Files\Internet Explorer
2014-02-12 23:54:49 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-12 23:49:39 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2013-08-11 22592]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2013-08-11 4716608]
R3 hswpan;WPAN Driver; C:\Windows\system32\DRIVERS\hswpan.sys [2011-12-07 108288]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-07-15 1381936]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2010-09-30 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2010-09-30 180736]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-11-11 232480]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-01-03 1363616]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-01-03 1748640]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2013-08-11 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-23 257928]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-14 118896]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-11 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------