VIRY.CZ

Dobrý den,

dovoluji si požádat o pomoc s následujícím problémem. Mám cca měsíc nový počítač, který je v současné době skoro nepoužitelný k práci s internetem. Prohlížení webových stránek je hrozně pomalé, nelze v podstatě nic stáhnout (zasekne, či přeruší, rychlost stahování je i tak katastrofální) - RSIT jsem stahoval několik minut. Vůbec nevím, čím to může být. Předem velmi děkuji za pomoc/rady.

MV

Zde přikládám log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by MV at 2014-05-22 19:04:26
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 278 GB (60%) free of 461 GB
Total RAM: 3273 MB (43% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPCardEngine.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 29541328
\??\C:\Windows\system32\conhost.exe "-2032160609-2000457899-1233817731-706836575-88105531511445107484055873901285203274
C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
taskeng.exe {529801CE-2669-45D5-9679-91D63744F3DC}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"taskhost.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
c:\Windows\SysWOW64\flcdlock.exe
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" /silent
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\SysWOW64\RunDll32.exe" "c:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
-Minimized
"c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"
"C:\Users\MV\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
HP File Sanitizer - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2013-08-07 129240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-19 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2013-08-16 1703424]
"Broadcom Wireless Manager UI"=C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [2014-05-17 8628224]
""= []
"CryptoMill Refresh"=C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-04 2774256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-05-13 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2013-07-18 683656]
"HPConnectionManager"=c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2013-09-19 185144]
""= []
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-08-01 337184]
"AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2013-07-25 77088]
"YouCam Tray"=c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2013-06-24 167488]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05 111576]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2013-08-07 490760]
"HP File Sanitizer"=C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2013-08-07 2213592]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"MobileBroadband"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [2013-03-25 76288]
"VmbNotifier"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe [2013-03-25 1861632]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-04 766208]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-04-25 4101584]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray

access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner

Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background

update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-05-22 19:04:26 ----D---- C:\rsit
2014-05-22 19:04:26 ----D---- C:\Program Files\trend micro
2014-05-21 22:22:10 ----A---- C:\Windows\system32\sdnclean64.exe
2014-05-21 22:22:07 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-05-21 22:21:55 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-19 20:57:17 ----D---- C:\Windows\system32\MRT
2014-05-19 20:57:14 ----A---- C:\Windows\system32\MRT.exe
2014-05-17 23:05:14 ----D---- C:\ProgramData\ATI
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsPer.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsP2Stor.sys
2014-05-17 15:55:16 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2014-05-17 14:52:20 ----D---- C:\Users\MV\AppData\Roaming\InstallShield
2014-05-17 14:43:26 ----D---- C:\Program Files (x86)\AMD AVT
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OpenVideo.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OVDecode64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OpenVideo64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\coinst_13.152.1.9001.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\clinfo.exe
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atitmm64.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atisamu64.dll
2014-05-17 14:34:09 ----A---- C:\Windows\system32\atio6axx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimuixx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimpc64.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\amdpcom64.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6txx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6pxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiesrxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atieclxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atidemgy.dll
2014-05-17 14:34:05 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticalrt64.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticaldd64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\aticalcl64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiapfxx.exe
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiadlxx.dll
2014-05-17 14:34:02 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2014-05-17 14:34:02 ----A---- C:\Windows\system32\amdocl64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdhcp32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdhcp64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdave64.dll
2014-05-17 13:58:08 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2014-05-15 20:30:17 ----D---- C:\Program Files (x86)\Adobe
2014-05-15 20:25:12 ----D---- C:\Program Files (x86)\Androsoft
2014-05-14 08:41:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtml.dll
2014-05-14 08:41:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 06:46:35 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 06:46:34 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 06:46:33 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 06:46:31 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 06:46:10 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 06:46:09 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 06:46:08 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 06:46:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 06:46:04 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 06:46:04 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\secur32.dll
2014-05-13 08:12:19 ----D---- C:\ProgramData\Adobe
2014-05-10 13:33:49 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-05-07 06:33:49 ----SD---- C:\Windows\system32\CompatTel
2014-05-04 20:51:38 ----D---- C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-05-01 00:05:46 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-04-29 06:55:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-29 06:55:05 ----A---- C:\Windows\system32\ieui.dll
2014-04-29 06:55:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-29 06:55:03 ----A---- C:\Windows\system32\vbscript.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\iernonce.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-29 06:54:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-29 06:54:50 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-29 06:54:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-29 06:54:45 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\system32\iesetup.dll
2014-04-29 06:54:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-29 06:54:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 06:54:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-29 06:54:36 ----A---- C:\Windows\system32\iertutil.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\urlmon.dll
2014-04-29 06:54:33 ----A---- C:\Windows\system32\ieframe.dll
2014-04-29 06:54:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-29 06:54:30 ----A---- C:\Windows\system32\jscript9.dll
2014-04-29 06:54:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-26 17:32:25 ----D---- C:\ProgramData\SZCCID
2014-04-26 17:32:25 ----D---- C:\Program Files (x86)\AlcorMicro
2014-04-26 17:32:12 ----D---- C:\Program Files (x86)\AlcorMicroData
2014-04-25 21:21:57 ----D---- C:\Users\MV\AppData\Roaming\FLEXnet
2014-04-25 21:04:53 ----D---- C:\Users\MV\AppData\Roaming\Vodafone
2014-04-25 21:04:20 ----D---- C:\ProgramData\Vodafone
2014-04-25 21:03:31 ----D---- C:\ProgramData\Macrovision
2014-04-25 21:03:31 ----D---- C:\ProgramData\FLEXnet
2014-04-25 21:03:31 ----D---- C:\Program Files (x86)\Vodafone

======List of files/folders modified in the last 1 months======

2014-05-22 19:05:49 ----D---- C:\Windows\Temp
2014-05-22 19:04:26 ----RD---- C:\Program Files
2014-05-22 18:49:39 ----D---- C:\Windows\System32
2014-05-22 18:49:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-22 18:49:38 ----D---- C:\Windows\inf
2014-05-22 18:48:41 ----AD---- C:\Windows
2014-05-22 18:35:06 ----D---- C:\Windows\system32\config
2014-05-22 18:21:40 ----D---- C:\ProgramData\PDFC
2014-05-21 23:06:46 ----D---- C:\Users\MV\AppData\Roaming\vlc
2014-05-21 23:03:28 ----D---- C:\Windows\system32\drivers\etc
2014-05-21 22:49:46 ----D---- C:\Windows\Prefetch
2014-05-21 22:22:52 ----D---- C:\Windows\system32\Tasks
2014-05-21 22:22:20 ----SD---- C:\ProgramData\Microsoft
2014-05-21 22:22:07 ----HD---- C:\ProgramData
2014-05-21 22:21:55 ----RD---- C:\Program Files (x86)
2014-05-21 07:55:16 ----SHD---- C:\Windows\Installer
2014-05-21 07:55:04 ----SHD---- C:\System Volume Information
2014-05-20 22:28:46 ----D---- C:\Windows\Panther
2014-05-20 22:28:45 ----D---- C:\Windows\Logs
2014-05-20 22:28:45 ----D---- C:\Windows\debug
2014-05-20 21:59:20 ----D---- C:\Users\MV\AppData\Roaming\hpqLog
2014-05-19 20:59:18 ----D---- C:\Program Files (x86)\Microsoft Office
2014-05-18 16:11:40 ----D---- C:\Windows\system32\drivers
2014-05-18 16:11:28 ----HD---- C:\Windows\system32\GroupPolicy
2014-05-17 18:59:52 ----D---- C:\Windows\SysWOW64
2014-05-17 18:58:47 ----D---- C:\Windows\system32\catroot
2014-05-17 17:52:24 ----D---- C:\Windows\Microsoft.NET
2014-05-17 15:55:29 ----D---- C:\Windows\SYSWOW64\sda
2014-05-17 15:55:27 ----D---- C:\Windows\system32\DriverStore
2014-05-17 15:55:14 ----D---- C:\Program Files (x86)\Realtek
2014-05-17 15:55:03 ----D---- C:\Windows\system32\catroot2
2014-05-17 15:54:31 ----D---- C:\SWSETUP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-TW
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-HK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-CN
2014-05-17 14:56:37 ----D---- C:\Windows\system32\tr-TR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\th-TH
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sv-SE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sl-SI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sk-SK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ru-RU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ro-RO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-PT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-BR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pl-PL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nl-NL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nb-NO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lv-LV
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lt-LT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ko-KR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ja-JP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\it-IT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hu-HU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hr-HR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\he-IL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fr-FR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fi-FI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\et-EE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\es-ES
2014-05-17 14:56:37 ----D---- C:\Windows\system32\en-US
2014-05-17 14:56:37 ----D---- C:\Windows\system32\el-GR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\de-DE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\da-DK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\cs-CZ
2014-05-17 14:56:37 ----D---- C:\Windows\system32\bg-BG
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ar-SA
2014-05-17 14:56:37 ----D---- C:\Windows\Help
2014-05-17 14:56:33 ----RSD---- C:\Windows\assembly
2014-05-17 14:53:26 ----D---- C:\Program Files (x86)\Cisco
2014-05-17 14:52:17 ----A---- C:\Windows\system32\wltrynt.dll
2014-05-17 14:52:16 ----A---- C:\Windows\system32\vcredist_x64.exe
2014-05-17 14:52:14 ----A---- C:\Windows\system32\vcredist_x64.bat
2014-05-17 14:52:10 ----A---- C:\Windows\system32\bcmttls.dll
2014-05-17 14:52:09 ----A---- C:\Windows\system32\BCMLogon.dll
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.exe
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.bat
2014-05-17 14:51:45 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-05-17 14:51:43 ----A---- C:\Windows\system32\bcmwlcoi.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvui64.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2014-05-17 14:43:27 ----D---- C:\ProgramData\AMD
2014-05-17 14:43:19 ----SD---- C:\Users\MV\AppData\Roaming\Microsoft
2014-05-17 14:42:17 ----D---- C:\Program Files (x86)\ATI Technologies
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiuxp64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd6a.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiu9p64.dll
2014-05-17 14:33:14 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2014-05-17 14:33:14 ----A---- C:\Windows\system32\atidxx64.dll
2014-05-17 14:33:13 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2014-05-17 14:33:13 ----A---- C:\Windows\system32\aticfx64.dll
2014-05-17 13:58:08 ----DC---- C:\Windows\system32\DRVSTORE
2014-05-17 13:25:10 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-05-15 23:19:43 ----D---- C:\Windows\rescache
2014-05-15 20:30:16 ----D---- C:\Program Files (x86)\Common Files
2014-05-14 18:09:14 ----D---- C:\Windows\winsxs
2014-05-14 18:05:49 ----D---- C:\Windows\PolicyDefinitions
2014-05-14 08:41:19 ----D---- C:\ProgramData\Microsoft Help
2014-05-14 08:38:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-05-13 08:15:36 ----D---- C:\Users\MV\AppData\Roaming\Adobe
2014-05-11 10:58:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-04 20:56:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-05-04 20:53:33 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-05-04 20:50:53 ----D---- C:\ProgramData\Hewlett-Packard
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-29 08:15:22 ----D---- C:\Program Files\Internet Explorer
2014-04-29 08:15:21 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-26 17:32:33 ----A---- C:\Windows\hbcikrnl.ini
2014-04-26 07:23:25 ----D---- C:\Windows\system32\wdi
2014-04-25 21:04:20 ----RSD---- C:\Windows\Fonts
2014-04-23 07:47:07 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\drivers\amd_sata.sys [2012-10-12 82600]
R0 amd_xata;amd_xata; C:\Windows\system32\drivers\amd_xata.sys [2012-10-12 42664]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 hpdskflt;HP Filter; C:\Windows\system32\drivers\hpdskflt.sys [2013-07-23 30520]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PinFile;PinFile; C:\Windows\system32\DRIVERS\PinFile.sys [2013-08-22 49856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SDDisk2K;SDDisk2K; C:\Windows\system32\DRIVERS\SDDisk2K.sys [2013-08-22 228544]
R0 SDDToki;SDDToki; C:\Windows\system32\DRIVERS\SDDToki.sys [2013-08-22 131264]
R0 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2011-12-27 90608]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 DAMDrv;DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [2013-06-13 65752]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\drivers\Accelerometer.sys [2013-07-23 43320]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\drivers\amdhub30.sys [2013-02-26 108128]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-05-17 12534784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-05-17 620032]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\amdxhc.sys [2013-02-26 228448]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-09-25 165688]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2014-05-17 23760]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-05-17 8030928]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-10-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-12-03 598808]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-02 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-03-06 21544]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\drivers\HpqKbFiltr.sys [2013-06-26 25912]
R3 IceKore;IceKore; C:\Windows\system32\DRIVERS\IceKore.sys [2013-08-19 397784]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-06-18 872152]
R3 SmbDrv;SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [2013-09-04 30448]
R3 SPUVCbv;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2013-08-20 1512952]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2013-08-16 551936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys [2013-09-04 524016]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2014-05-17 58536]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-10-29 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RTSPER;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2014-05-17 465624]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 SmbDrvI;SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [2013-09-04 34544]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-10-29 19968]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-05-17 239616]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-12-07 1005944]
R2 CreoService;HP Trust Circles Service; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [2013-08-23 1366488]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CtAgentService;Absolute Software Agent Service; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [2013-08-14 7168]
R2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS

\CLMSMonitorServicePDVD12.exe [2013-09-18 77576]
R2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe

[2013-09-18 298760]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager

\Bin\DpHostW.exe [2013-09-14 500048]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 FLCDLOCK;HP Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2013-09-06 567608]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 HPFSService;HP File Sanitizer; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2013-08-07 1758424]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-08-01 681760]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-23 43320]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2013-07-18 1143432]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-04-25 1738200]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-04-25 2081752]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2013-08-16 339456]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2013-07-03 3223144]
R2 VmbService;Vodafone Mobile Connect Service; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [2013-03-25 8704]
R3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2013-09-19 1445176]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-08-23 1232056]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 253600]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

[2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

[2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

[2013-09-11 139856]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Přikládám sken z programu:

# AdwCleaner v3.210 - Report created 22/05/2014 at 20:17:05
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : MV - MV-HP
# Running from : C:\Users\MV\Desktop\adwcleaner_3.210.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v29.0.1 (cs)

[ File : C:\Users\MV\AppData\Roaming\Mozilla\Firefox\Profiles\z2f4s107.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [764 octets] - [22/05/2014 20:16:11]
AdwCleaner[S0].txt - [686 octets] - [22/05/2014 20:17:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [745 octets] ##########

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Provedeno a níže příkládám nový log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by MV at 2014-05-22 20:56:50
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 278 GB (60%) free of 461 GB
Total RAM: 3273 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:57:29, on 22.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\trend micro\MV.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [HPConnectionManager] c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [YouCam Tray] "c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [HP File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe
O4 - HKLM\..\Run: [MobileBroadband] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent
O4 - HKLM\..\Run: [VmbNotifier] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: HP Trust Circles Service (CreoService) - CryptoMill Technologies Ltd. - C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
O23 - Service: Absolute Software Agent Service (CtAgentService) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Monitor Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
O23 - Service: @c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP File Sanitizer (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Vodafone Mobile Connect Service (VmbService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13183 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPCardEngine.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 29261680
\??\C:\Windows\system32\conhost.exe "-1704719973-1892305439-1935223694-434953192-1652974453-15314263821831101522-958170091
C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
taskeng.exe {2F76C5DA-ECF7-4336-8C21-BAF14180C78C}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"taskhost.exe"
"c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
c:\Windows\SysWOW64\flcdlock.exe
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe"
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" /silent
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\SysWOW64\RunDll32.exe" "c:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
-Minimized
"c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
taskeng.exe {82F140EF-6622-44FC-B0A8-9675A29D9DD6}
"C:\Users\MV\Downloads\RSITx64(1).exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\MV\AppData\Roaming\Mozilla\Firefox\Profiles\z2f4s107.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\digitalpersona.com/ChromeDPAgent]
"Description"=
"Path"=c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
HP File Sanitizer - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2013-08-07 129240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-19 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2013-08-16 1703424]
"Broadcom Wireless Manager UI"=C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [2014-05-17 8628224]
""= []
"CryptoMill Refresh"=C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-04 2774256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-05-13 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2013-07-18 683656]
"HPConnectionManager"=c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2013-09-19 185144]
""= []
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-08-01 337184]
"AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2013-07-25 77088]
"YouCam Tray"=c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2013-06-24 167488]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05 111576]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2013-08-07 490760]
"HP File Sanitizer"=C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2013-08-07 2213592]
"MobileBroadband"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [2013-03-25 76288]
"VmbNotifier"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe [2013-03-25 1861632]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-04 766208]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-04-25 4101584]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-05-22 20:49:55 ----D---- C:\_OTM
2014-05-22 20:15:57 ----D---- C:\AdwCleaner
2014-05-22 19:04:26 ----D---- C:\rsit
2014-05-22 19:04:26 ----D---- C:\Program Files\trend micro
2014-05-21 22:22:10 ----A---- C:\Windows\system32\sdnclean64.exe
2014-05-21 22:22:07 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-05-21 22:21:55 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-19 20:57:17 ----D---- C:\Windows\system32\MRT
2014-05-19 20:57:14 ----A---- C:\Windows\system32\MRT.exe
2014-05-17 23:05:14 ----D---- C:\ProgramData\ATI
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsPer.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsP2Stor.sys
2014-05-17 15:55:16 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2014-05-17 14:52:20 ----D---- C:\Users\MV\AppData\Roaming\InstallShield
2014-05-17 14:43:26 ----D---- C:\Program Files (x86)\AMD AVT
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OpenVideo.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OVDecode64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OpenVideo64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\coinst_13.152.1.9001.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\clinfo.exe
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atitmm64.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atisamu64.dll
2014-05-17 14:34:09 ----A---- C:\Windows\system32\atio6axx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimuixx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimpc64.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\amdpcom64.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6txx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6pxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiesrxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atieclxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atidemgy.dll
2014-05-17 14:34:05 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticalrt64.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticaldd64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\aticalcl64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiapfxx.exe
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiadlxx.dll
2014-05-17 14:34:02 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2014-05-17 14:34:02 ----A---- C:\Windows\system32\amdocl64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdhcp32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdhcp64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdave64.dll
2014-05-17 13:58:08 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2014-05-15 20:30:17 ----D---- C:\Program Files (x86)\Adobe
2014-05-15 20:25:12 ----D---- C:\Program Files (x86)\Androsoft
2014-05-14 08:41:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtml.dll
2014-05-14 08:41:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 06:46:35 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 06:46:34 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 06:46:33 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 06:46:31 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 06:46:10 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 06:46:09 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 06:46:08 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 06:46:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 06:46:04 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 06:46:04 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\secur32.dll
2014-05-13 08:12:19 ----D---- C:\ProgramData\Adobe
2014-05-10 13:33:49 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-05-07 06:33:49 ----SD---- C:\Windows\system32\CompatTel
2014-05-04 20:51:38 ----D---- C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-05-01 00:05:46 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-04-29 06:55:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-29 06:55:05 ----A---- C:\Windows\system32\ieui.dll
2014-04-29 06:55:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-29 06:55:03 ----A---- C:\Windows\system32\vbscript.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\iernonce.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-29 06:54:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-29 06:54:50 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-29 06:54:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-29 06:54:45 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\system32\iesetup.dll
2014-04-29 06:54:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-29 06:54:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 06:54:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-29 06:54:36 ----A---- C:\Windows\system32\iertutil.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\urlmon.dll
2014-04-29 06:54:33 ----A---- C:\Windows\system32\ieframe.dll
2014-04-29 06:54:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-29 06:54:30 ----A---- C:\Windows\system32\jscript9.dll
2014-04-29 06:54:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-26 17:32:25 ----D---- C:\ProgramData\SZCCID
2014-04-26 17:32:25 ----D---- C:\Program Files (x86)\AlcorMicro
2014-04-26 17:32:12 ----D---- C:\Program Files (x86)\AlcorMicroData
2014-04-25 21:21:57 ----D---- C:\Users\MV\AppData\Roaming\FLEXnet
2014-04-25 21:04:53 ----D---- C:\Users\MV\AppData\Roaming\Vodafone
2014-04-25 21:04:20 ----D---- C:\ProgramData\Vodafone
2014-04-25 21:03:31 ----D---- C:\ProgramData\Macrovision
2014-04-25 21:03:31 ----D---- C:\ProgramData\FLEXnet
2014-04-25 21:03:31 ----D---- C:\Program Files (x86)\Vodafone

======List of files/folders modified in the last 1 month======

2014-05-22 20:57:08 ----D---- C:\Windows\Temp
2014-05-22 20:56:28 ----D---- C:\Windows\System32
2014-05-22 20:56:28 ----D---- C:\Windows\inf
2014-05-22 20:56:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-22 20:52:18 ----AD---- C:\Windows
2014-05-22 20:51:53 ----D---- C:\Windows\system32\config
2014-05-22 20:51:53 ----D---- C:\ProgramData\PDFC
2014-05-22 19:04:26 ----RD---- C:\Program Files
2014-05-21 23:06:46 ----D---- C:\Users\MV\AppData\Roaming\vlc
2014-05-21 23:03:28 ----D---- C:\Windows\system32\drivers\etc
2014-05-21 22:49:46 ----D---- C:\Windows\Prefetch
2014-05-21 22:22:52 ----D---- C:\Windows\system32\Tasks
2014-05-21 22:22:20 ----SD---- C:\ProgramData\Microsoft
2014-05-21 22:22:07 ----HD---- C:\ProgramData
2014-05-21 22:21:55 ----RD---- C:\Program Files (x86)
2014-05-21 07:55:16 ----SHD---- C:\Windows\Installer
2014-05-21 07:55:04 ----SHD---- C:\System Volume Information
2014-05-20 22:28:46 ----D---- C:\Windows\Panther
2014-05-20 22:28:45 ----D---- C:\Windows\Logs
2014-05-20 22:28:45 ----D---- C:\Windows\debug
2014-05-20 21:59:20 ----D---- C:\Users\MV\AppData\Roaming\hpqLog
2014-05-19 20:59:18 ----D---- C:\Program Files (x86)\Microsoft Office
2014-05-18 16:11:40 ----D---- C:\Windows\system32\drivers
2014-05-18 16:11:28 ----HD---- C:\Windows\system32\GroupPolicy
2014-05-17 18:59:52 ----D---- C:\Windows\SysWOW64
2014-05-17 18:58:47 ----D---- C:\Windows\system32\catroot
2014-05-17 17:52:24 ----D---- C:\Windows\Microsoft.NET
2014-05-17 15:55:29 ----D---- C:\Windows\SYSWOW64\sda
2014-05-17 15:55:27 ----D---- C:\Windows\system32\DriverStore
2014-05-17 15:55:14 ----D---- C:\Program Files (x86)\Realtek
2014-05-17 15:55:03 ----D---- C:\Windows\system32\catroot2
2014-05-17 15:54:31 ----D---- C:\SWSETUP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-TW
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-HK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-CN
2014-05-17 14:56:37 ----D---- C:\Windows\system32\tr-TR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\th-TH
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sv-SE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sl-SI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sk-SK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ru-RU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ro-RO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-PT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-BR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pl-PL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nl-NL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nb-NO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lv-LV
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lt-LT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ko-KR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ja-JP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\it-IT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hu-HU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hr-HR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\he-IL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fr-FR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fi-FI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\et-EE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\es-ES
2014-05-17 14:56:37 ----D---- C:\Windows\system32\en-US
2014-05-17 14:56:37 ----D---- C:\Windows\system32\el-GR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\de-DE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\da-DK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\cs-CZ
2014-05-17 14:56:37 ----D---- C:\Windows\system32\bg-BG
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ar-SA
2014-05-17 14:56:37 ----D---- C:\Windows\Help
2014-05-17 14:56:33 ----RSD---- C:\Windows\assembly
2014-05-17 14:53:26 ----D---- C:\Program Files (x86)\Cisco
2014-05-17 14:52:17 ----A---- C:\Windows\system32\wltrynt.dll
2014-05-17 14:52:16 ----A---- C:\Windows\system32\vcredist_x64.exe
2014-05-17 14:52:14 ----A---- C:\Windows\system32\vcredist_x64.bat
2014-05-17 14:52:10 ----A---- C:\Windows\system32\bcmttls.dll
2014-05-17 14:52:09 ----A---- C:\Windows\system32\BCMLogon.dll
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.exe
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.bat
2014-05-17 14:51:45 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-05-17 14:51:43 ----A---- C:\Windows\system32\bcmwlcoi.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvui64.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2014-05-17 14:43:27 ----D---- C:\ProgramData\AMD
2014-05-17 14:43:19 ----SD---- C:\Users\MV\AppData\Roaming\Microsoft
2014-05-17 14:42:17 ----D---- C:\Program Files (x86)\ATI Technologies
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiuxp64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd6a.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiu9p64.dll
2014-05-17 14:33:14 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2014-05-17 14:33:14 ----A---- C:\Windows\system32\atidxx64.dll
2014-05-17 14:33:13 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2014-05-17 14:33:13 ----A---- C:\Windows\system32\aticfx64.dll
2014-05-17 13:58:08 ----DC---- C:\Windows\system32\DRVSTORE
2014-05-17 13:25:10 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-05-15 23:19:43 ----D---- C:\Windows\rescache
2014-05-15 20:30:16 ----D---- C:\Program Files (x86)\Common Files
2014-05-14 18:09:14 ----D---- C:\Windows\winsxs
2014-05-14 18:05:49 ----D---- C:\Windows\PolicyDefinitions
2014-05-14 08:41:19 ----D---- C:\ProgramData\Microsoft Help
2014-05-14 08:38:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-05-13 08:15:36 ----D---- C:\Users\MV\AppData\Roaming\Adobe
2014-05-11 10:58:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-04 20:56:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-05-04 20:53:33 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-05-04 20:50:53 ----D---- C:\ProgramData\Hewlett-Packard
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-29 08:15:22 ----D---- C:\Program Files\Internet Explorer
2014-04-29 08:15:21 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-26 17:32:33 ----A---- C:\Windows\hbcikrnl.ini
2014-04-26 07:23:25 ----D---- C:\Windows\system32\wdi
2014-04-25 21:04:20 ----RSD---- C:\Windows\Fonts
2014-04-23 07:47:07 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\drivers\amd_sata.sys [2012-10-12 82600]
R0 amd_xata;amd_xata; C:\Windows\system32\drivers\amd_xata.sys [2012-10-12 42664]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 hpdskflt;HP Filter; C:\Windows\system32\drivers\hpdskflt.sys [2013-07-23 30520]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PinFile;PinFile; C:\Windows\system32\DRIVERS\PinFile.sys [2013-08-22 49856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SDDisk2K;SDDisk2K; C:\Windows\system32\DRIVERS\SDDisk2K.sys [2013-08-22 228544]
R0 SDDToki;SDDToki; C:\Windows\system32\DRIVERS\SDDToki.sys [2013-08-22 131264]
R0 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2011-12-27 90608]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 DAMDrv;DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [2013-06-13 65752]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\drivers\Accelerometer.sys [2013-07-23 43320]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\drivers\amdhub30.sys [2013-02-26 108128]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-05-17 12534784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-05-17 620032]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\amdxhc.sys [2013-02-26 228448]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-09-25 165688]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2014-05-17 23760]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-05-17 8030928]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-10-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-12-03 598808]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-02 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-03-06 21544]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\drivers\HpqKbFiltr.sys [2013-06-26 25912]
R3 IceKore;IceKore; C:\Windows\system32\DRIVERS\IceKore.sys [2013-08-19 397784]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-06-18 872152]
R3 SmbDrv;SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [2013-09-04 30448]
R3 SPUVCbv;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2013-08-20 1512952]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2013-08-16 551936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys [2013-09-04 524016]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2014-05-17 58536]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-10-29 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RTSPER;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2014-05-17 465624]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 SmbDrvI;SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [2013-09-04 34544]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-10-29 19968]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-05-17 239616]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-12-07 1005944]
R2 CreoService;HP Trust Circles Service; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [2013-08-23 1366488]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CtAgentService;Absolute Software Agent Service; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [2013-08-14 7168]
R2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [2013-09-18 77576]
R2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [2013-09-18 298760]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2013-09-14 500048]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 FLCDLOCK;HP Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2013-09-06 567608]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 HPFSService;HP File Sanitizer; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2013-08-07 1758424]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-08-01 681760]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-23 43320]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2013-07-18 1143432]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-04-25 1738200]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-04-25 2081752]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2013-08-16 339456]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2013-07-03 3223144]
R2 VmbService;Vodafone Mobile Connect Service; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [2013-03-25 8704]
R3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2013-09-19 1445176]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-08-23 1232056]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 253600]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\MV.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Tak jsem to zkusil více krát, ale první a poslední nelze odstranit (fix). HijackThis hlásí v úvodu chybovou hlášku, viz příloha. Rovněž při pokusu odstranit všechny soubory na začátku (když jich bylo ještě pět) naskočila nějaká chybová hláška, ale tu jsem nezvládl zaznamenat. Mám přesto spustit OTM?

Spusťte HJT jako správce.

Aha, děkuji. Takto se již podařilo, včetně následného OTM. Internet již určitě funguje o dost lépe, ale stahování je stále takové pomalé (třeba cca 26 kb/s - 50 kb/s) - slabým signálem wifi to není.

Přikládám aktuální log z RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by MV at 2014-05-22 23:31:52
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 278 GB (60%) free of 461 GB
Total RAM: 3273 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:32:18, on 22.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\MV.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [HPConnectionManager] c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [YouCam Tray] "c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [HP File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe
O4 - HKLM\..\Run: [MobileBroadband] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent
O4 - HKLM\..\Run: [VmbNotifier] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: HP Trust Circles Service (CreoService) - CryptoMill Technologies Ltd. - C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
O23 - Service: Absolute Software Agent Service (CtAgentService) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Monitor Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
O23 - Service: CyberLink PowerDVD 12 Media Server Service - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
O23 - Service: @c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP File Sanitizer (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Vodafone Mobile Connect Service (VmbService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12652 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPCardEngine.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 28354880
\??\C:\Windows\system32\conhost.exe "-1350368349-60069509277829289506511194643152781-177883876513784243971680743629
C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe"
"c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe"
c:\Windows\SysWOW64\flcdlock.exe
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
taskhost.exe USER
"c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe"
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" /silent
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Windows\SysWOW64\RunDll32.exe" "c:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
-Minimized
"c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe"
taskeng.exe {327D5468-4478-4AE5-88C9-4B1C38AD1863}
taskeng.exe {DB3D8C4C-12A5-42A0-9EBA-2E2999A301A9}
"C:\Users\MV\Downloads\RSITx64(1).exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\MV\AppData\Roaming\Mozilla\Firefox\Profiles\z2f4s107.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\digitalpersona.com/ChromeDPAgent]
"Description"=
"Path"=c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\components\npChromeDPAgent.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
HP File Sanitizer - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2013-08-07 129240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-19 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-19 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2013-08-16 1703424]
"Broadcom Wireless Manager UI"=C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [2014-05-17 8628224]
""= []
"CryptoMill Refresh"=C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-04 2774256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-05-13 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2013-07-18 683656]
"HPConnectionManager"=c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2013-09-19 185144]
""= []
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-08-01 337184]
"AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2013-07-25 77088]
"YouCam Tray"=c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2013-06-24 167488]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05 111576]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2013-08-07 490760]
"HP File Sanitizer"=C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2013-08-07 2213592]
"MobileBroadband"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [2013-03-25 76288]
"VmbNotifier"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe [2013-03-25 1861632]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-04 766208]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-04-25 4101584]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-05-22 23:31:52 ----D---- C:\rsit
2014-05-22 20:15:57 ----D---- C:\AdwCleaner
2014-05-22 19:04:26 ----D---- C:\Program Files\trend micro
2014-05-21 22:22:10 ----A---- C:\Windows\system32\sdnclean64.exe
2014-05-21 22:22:07 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-05-21 22:21:55 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-05-19 20:57:17 ----D---- C:\Windows\system32\MRT
2014-05-19 20:57:14 ----A---- C:\Windows\system32\MRT.exe
2014-05-17 23:05:14 ----D---- C:\ProgramData\ATI
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsPer.sys
2014-05-17 15:55:19 ----A---- C:\Windows\system32\drivers\RtsP2Stor.sys
2014-05-17 15:55:16 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2014-05-17 14:52:20 ----D---- C:\Users\MV\AppData\Roaming\InstallShield
2014-05-17 14:43:26 ----D---- C:\Program Files (x86)\AMD AVT
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OVDecode.dll
2014-05-17 14:34:13 ----A---- C:\Windows\SYSWOW64\OpenVideo.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OVDecode64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\OpenVideo64.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\coinst_13.152.1.9001.dll
2014-05-17 14:34:13 ----A---- C:\Windows\system32\clinfo.exe
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atisamu32.dll
2014-05-17 14:34:11 ----A---- C:\Windows\SYSWOW64\atioglxx.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atitmm64.dll
2014-05-17 14:34:11 ----A---- C:\Windows\system32\atisamu64.dll
2014-05-17 14:34:09 ----A---- C:\Windows\system32\atio6axx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\atimpc32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimuixx.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\atimpc64.dll
2014-05-17 14:34:08 ----A---- C:\Windows\system32\amdpcom64.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\SYSWOW64\atigktxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiglpxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6txx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atig6pxx.dll
2014-05-17 14:34:07 ----A---- C:\Windows\system32\atiesrxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atieclxx.exe
2014-05-17 14:34:06 ----A---- C:\Windows\system32\atidemgy.dll
2014-05-17 14:34:05 ----A---- C:\Windows\SYSWOW64\aticalrt.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticalrt64.dll
2014-05-17 14:34:05 ----A---- C:\Windows\system32\aticaldd64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticaldd.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\aticalcl.dll
2014-05-17 14:34:04 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\OpenCL.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\aticalcl64.dll
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiapfxx.exe
2014-05-17 14:34:04 ----A---- C:\Windows\system32\atiadlxx.dll
2014-05-17 14:34:02 ----A---- C:\Windows\SYSWOW64\amdocl.dll
2014-05-17 14:34:02 ----A---- C:\Windows\system32\amdocl64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdhcp32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\SYSWOW64\amdave32.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdhcp64.dll
2014-05-17 14:34:01 ----A---- C:\Windows\system32\amdave64.dll
2014-05-17 13:58:08 ----A---- C:\Windows\system32\drivers\usbfilter.sys
2014-05-15 20:30:17 ----D---- C:\Program Files (x86)\Adobe
2014-05-15 20:25:12 ----D---- C:\Program Files (x86)\Androsoft
2014-05-14 08:41:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtmled.dll
2014-05-14 08:41:23 ----A---- C:\Windows\system32\mshtml.dll
2014-05-14 08:41:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 06:46:35 ----A---- C:\Windows\system32\shell32.dll
2014-05-14 06:46:34 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-14 06:46:33 ----A---- C:\Windows\system32\aepdu.dll
2014-05-14 06:46:31 ----A---- C:\Windows\system32\aeinv.dll
2014-05-14 06:46:10 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 06:46:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-14 06:46:09 ----A---- C:\Windows\system32\kerberos.dll
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-14 06:46:08 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\winlogon.exe
2014-05-14 06:46:08 ----A---- C:\Windows\system32\objsel.dll
2014-05-14 06:46:08 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-14 06:46:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-14 06:46:06 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\wdigest.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-14 06:46:06 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\schannel.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-14 06:46:05 ----A---- C:\Windows\system32\adprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\sspicli.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\lsass.exe
2014-05-14 06:46:04 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-14 06:46:04 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\credssp.dll
2014-05-14 06:46:04 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-14 06:46:03 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-14 06:46:03 ----A---- C:\Windows\system32\secur32.dll
2014-05-13 08:12:19 ----D---- C:\ProgramData\Adobe
2014-05-10 13:33:49 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-05-07 06:33:49 ----SD---- C:\Windows\system32\CompatTel
2014-05-04 20:51:38 ----D---- C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-05-01 00:05:46 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-04-29 06:55:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-04-29 06:55:05 ----A---- C:\Windows\system32\ieui.dll
2014-04-29 06:55:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-04-29 06:55:03 ----A---- C:\Windows\system32\vbscript.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\iernonce.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 06:54:52 ----A---- C:\Windows\system32\ie4uinit.exe
2014-04-29 06:54:50 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-04-29 06:54:50 ----A---- C:\Windows\system32\jscript9diag.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtrans.dll
2014-04-29 06:54:49 ----A---- C:\Windows\system32\dxtmsft.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-04-29 06:54:48 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\msrating.dll
2014-04-29 06:54:48 ----A---- C:\Windows\system32\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-04-29 06:54:47 ----A---- C:\Windows\system32\msfeeds.dll
2014-04-29 06:54:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-04-29 06:54:45 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-04-29 06:54:45 ----A---- C:\Windows\system32\ieUnatt.exe
2014-04-29 06:54:45 ----A---- C:\Windows\system32\iesetup.dll
2014-04-29 06:54:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-04-29 06:54:41 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-04-29 06:54:40 ----A---- C:\Windows\system32\ieapfltr.dll
2014-04-29 06:54:39 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 06:54:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-04-29 06:54:36 ----A---- C:\Windows\system32\iertutil.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\wininet.dll
2014-04-29 06:54:35 ----A---- C:\Windows\system32\urlmon.dll
2014-04-29 06:54:33 ----A---- C:\Windows\system32\ieframe.dll
2014-04-29 06:54:32 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-04-29 06:54:30 ----A---- C:\Windows\system32\jscript9.dll
2014-04-29 06:54:29 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-04-26 17:32:25 ----D---- C:\ProgramData\SZCCID
2014-04-26 17:32:25 ----D---- C:\Program Files (x86)\AlcorMicro
2014-04-26 17:32:12 ----D---- C:\Program Files (x86)\AlcorMicroData
2014-04-25 21:21:57 ----D---- C:\Users\MV\AppData\Roaming\FLEXnet
2014-04-25 21:04:53 ----D---- C:\Users\MV\AppData\Roaming\Vodafone
2014-04-25 21:04:20 ----D---- C:\ProgramData\Vodafone
2014-04-25 21:03:31 ----D---- C:\ProgramData\Macrovision
2014-04-25 21:03:31 ----D---- C:\ProgramData\FLEXnet
2014-04-25 21:03:31 ----D---- C:\Program Files (x86)\Vodafone

======List of files/folders modified in the last 1 month======

2014-05-22 23:32:02 ----D---- C:\Windows\Temp
2014-05-22 23:29:12 ----D---- C:\Windows\System32
2014-05-22 23:29:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-05-22 23:29:11 ----D---- C:\Windows\inf
2014-05-22 23:25:08 ----AD---- C:\Windows
2014-05-22 23:23:58 ----D---- C:\Windows\system32\config
2014-05-22 23:23:58 ----D---- C:\ProgramData\PDFC
2014-05-22 22:26:09 ----D---- C:\Windows\system32\drivers\etc
2014-05-22 19:04:26 ----RD---- C:\Program Files
2014-05-21 23:06:46 ----D---- C:\Users\MV\AppData\Roaming\vlc
2014-05-21 22:49:46 ----D---- C:\Windows\Prefetch
2014-05-21 22:22:52 ----D---- C:\Windows\system32\Tasks
2014-05-21 22:22:20 ----SD---- C:\ProgramData\Microsoft
2014-05-21 22:22:07 ----HD---- C:\ProgramData
2014-05-21 22:21:55 ----RD---- C:\Program Files (x86)
2014-05-21 07:55:16 ----SHD---- C:\Windows\Installer
2014-05-21 07:55:04 ----SHD---- C:\System Volume Information
2014-05-20 22:28:46 ----D---- C:\Windows\Panther
2014-05-20 22:28:45 ----D---- C:\Windows\Logs
2014-05-20 22:28:45 ----D---- C:\Windows\debug
2014-05-20 21:59:20 ----D---- C:\Users\MV\AppData\Roaming\hpqLog
2014-05-19 20:59:18 ----D---- C:\Program Files (x86)\Microsoft Office
2014-05-18 16:11:40 ----D---- C:\Windows\system32\drivers
2014-05-18 16:11:28 ----HD---- C:\Windows\system32\GroupPolicy
2014-05-17 18:59:52 ----D---- C:\Windows\SysWOW64
2014-05-17 18:58:47 ----D---- C:\Windows\system32\catroot
2014-05-17 17:52:24 ----D---- C:\Windows\Microsoft.NET
2014-05-17 15:55:29 ----D---- C:\Windows\SYSWOW64\sda
2014-05-17 15:55:27 ----D---- C:\Windows\system32\DriverStore
2014-05-17 15:55:14 ----D---- C:\Program Files (x86)\Realtek
2014-05-17 15:55:03 ----D---- C:\Windows\system32\catroot2
2014-05-17 15:54:31 ----D---- C:\SWSETUP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-TW
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-HK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\zh-CN
2014-05-17 14:56:37 ----D---- C:\Windows\system32\tr-TR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\th-TH
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sv-SE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sl-SI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\sk-SK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ru-RU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ro-RO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-PT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pt-BR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\pl-PL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nl-NL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\nb-NO
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lv-LV
2014-05-17 14:56:37 ----D---- C:\Windows\system32\lt-LT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ko-KR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ja-JP
2014-05-17 14:56:37 ----D---- C:\Windows\system32\it-IT
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hu-HU
2014-05-17 14:56:37 ----D---- C:\Windows\system32\hr-HR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\he-IL
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fr-FR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\fi-FI
2014-05-17 14:56:37 ----D---- C:\Windows\system32\et-EE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\es-ES
2014-05-17 14:56:37 ----D---- C:\Windows\system32\en-US
2014-05-17 14:56:37 ----D---- C:\Windows\system32\el-GR
2014-05-17 14:56:37 ----D---- C:\Windows\system32\de-DE
2014-05-17 14:56:37 ----D---- C:\Windows\system32\da-DK
2014-05-17 14:56:37 ----D---- C:\Windows\system32\cs-CZ
2014-05-17 14:56:37 ----D---- C:\Windows\system32\bg-BG
2014-05-17 14:56:37 ----D---- C:\Windows\system32\ar-SA
2014-05-17 14:56:37 ----D---- C:\Windows\Help
2014-05-17 14:56:33 ----RSD---- C:\Windows\assembly
2014-05-17 14:53:26 ----D---- C:\Program Files (x86)\Cisco
2014-05-17 14:52:17 ----A---- C:\Windows\system32\wltrynt.dll
2014-05-17 14:52:16 ----A---- C:\Windows\system32\vcredist_x64.exe
2014-05-17 14:52:14 ----A---- C:\Windows\system32\vcredist_x64.bat
2014-05-17 14:52:10 ----A---- C:\Windows\system32\bcmttls.dll
2014-05-17 14:52:09 ----A---- C:\Windows\system32\BCMLogon.dll
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.exe
2014-05-17 14:52:07 ----A---- C:\Windows\SYSWOW64\vcredist_x64.bat
2014-05-17 14:51:45 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-05-17 14:51:43 ----A---- C:\Windows\system32\bcmwlcoi.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvui64.dll
2014-05-17 14:51:42 ----A---- C:\Windows\system32\bcmihvsrv64.dll
2014-05-17 14:43:27 ----D---- C:\ProgramData\AMD
2014-05-17 14:43:19 ----SD---- C:\Users\MV\AppData\Roaming\Microsoft
2014-05-17 14:42:17 ----D---- C:\Program Files (x86)\ATI Technologies
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiuxpag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdva.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiumdag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\SYSWOW64\atiu9pag.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiuxp64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd6a.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiumd64.dll
2014-05-17 14:33:16 ----A---- C:\Windows\system32\atiu9p64.dll
2014-05-17 14:33:14 ----A---- C:\Windows\SYSWOW64\atidxx32.dll
2014-05-17 14:33:14 ----A---- C:\Windows\system32\atidxx64.dll
2014-05-17 14:33:13 ----A---- C:\Windows\SYSWOW64\aticfx32.dll
2014-05-17 14:33:13 ----A---- C:\Windows\system32\aticfx64.dll
2014-05-17 13:58:08 ----DC---- C:\Windows\system32\DRVSTORE
2014-05-17 13:25:10 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-05-15 23:19:43 ----D---- C:\Windows\rescache
2014-05-15 20:30:16 ----D---- C:\Program Files (x86)\Common Files
2014-05-14 18:09:14 ----D---- C:\Windows\winsxs
2014-05-14 18:05:49 ----D---- C:\Windows\PolicyDefinitions
2014-05-14 08:41:19 ----D---- C:\ProgramData\Microsoft Help
2014-05-14 08:38:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-05-13 08:15:36 ----D---- C:\Users\MV\AppData\Roaming\Adobe
2014-05-11 10:58:20 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-04 20:56:12 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-05-04 20:53:33 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-05-04 20:50:53 ----D---- C:\ProgramData\Hewlett-Packard
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\en-US
2014-04-29 08:15:22 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-04-29 08:15:22 ----D---- C:\Program Files\Internet Explorer
2014-04-29 08:15:21 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-26 17:32:33 ----A---- C:\Windows\hbcikrnl.ini
2014-04-26 07:23:25 ----D---- C:\Windows\system32\wdi
2014-04-25 21:04:20 ----RSD---- C:\Windows\Fonts
2014-04-23 07:47:07 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amd_sata;amd_sata; C:\Windows\system32\drivers\amd_sata.sys [2012-10-12 82600]
R0 amd_xata;amd_xata; C:\Windows\system32\drivers\amd_xata.sys [2012-10-12 42664]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 hpdskflt;HP Filter; C:\Windows\system32\drivers\hpdskflt.sys [2013-07-23 30520]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PinFile;PinFile; C:\Windows\system32\DRIVERS\PinFile.sys [2013-08-22 49856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SDDisk2K;SDDisk2K; C:\Windows\system32\DRIVERS\SDDisk2K.sys [2013-08-22 228544]
R0 SDDToki;SDDToki; C:\Windows\system32\DRIVERS\SDDToki.sys [2013-08-22 131264]
R0 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2011-12-27 90608]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 DAMDrv;DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [2013-06-13 65752]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\drivers\Accelerometer.sys [2013-07-23 43320]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\drivers\amdhub30.sys [2013-02-26 108128]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-05-17 12534784]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-05-17 620032]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\amdxhc.sys [2013-02-26 228448]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-07-05 96256]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-09-25 165688]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2014-05-17 23760]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-05-17 8030928]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-10-29 80384]
R3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\Windows\system32\drivers\btwampfl.sys [2012-12-03 598808]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2012-05-02 184144]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2012-03-06 210984]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-09-17 39976]
R3 btwrchid;btwrchid; C:\Windows\system32\drivers\btwrchid.sys [2012-03-06 21544]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\drivers\HpqKbFiltr.sys [2013-06-26 25912]
R3 IceKore;IceKore; C:\Windows\system32\DRIVERS\IceKore.sys [2013-08-19 397784]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-06-18 872152]
R3 SmbDrv;SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [2013-09-04 30448]
R3 SPUVCbv;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2013-08-20 1512952]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2013-08-16 551936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys [2013-09-04 524016]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2014-05-17 58536]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-10-29 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RTSPER;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2014-05-17 465624]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 SmbDrvI;SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [2013-09-04 34544]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-10-29 19968]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-05-17 239616]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2012-12-07 1005944]
R2 CreoService;HP Trust Circles Service; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [2013-08-23 1366488]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CtAgentService;Absolute Software Agent Service; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [2013-08-14 7168]
R2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [2013-09-18 77576]
R2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [2013-09-18 298760]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2013-09-14 500048]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 FLCDLOCK;HP Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2013-09-06 567608]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 HPFSService;HP File Sanitizer; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2013-08-07 1758424]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-08-01 681760]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-23 43320]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2013-07-18 1143432]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-04-25 1738200]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-04-25 2081752]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2013-08-16 339456]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2013-07-03 3223144]
R2 VmbService;Vodafone Mobile Connect Service; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [2013-03-25 8704]
R3 hpCMSrv;HP Connection Manager 4 Service; c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2013-09-19 1445176]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-08-23 1232056]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 253600]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-20 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Dobrý den,

chtěl bych se zeptat, zda Vás nenapadá ještě něco dalšího, čím by to pomalé stahování mohlo být? Standardní práce s internetem je určitě lepší, ale stejně pořád mi to příjde trochu pomalejší, než obvykle.

Předem velmi děkuji.

Ještě můžeme udělat hlobkový sken na viry. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Dobrý večer,

omlouvám se zpoždění, přikládám log z programu ComboFix, viz níže. Předem děkuji

ComboFix 14-05-19.01 - MV 25.05.2014 18:43:41.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3273.1842 [GMT 2:00]
Spuštěný z: c:\users\MV\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-25 do 2014-05-25 )))))))))))))))))))))))))))))))
.
.
2014-05-25 16:50 . 2014-05-25 16:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-05-25 16:31 . 2014-05-25 16:31 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5FE0B1AD-2178-4D7A-A065-6627D03F3758}\offreg.dll
2014-05-23 19:54 . 2014-04-30 23:20 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5FE0B1AD-2178-4D7A-A065-6627D03F3758}\mpengine.dll
2014-05-22 21:31 . 2014-05-22 21:32 -------- d-----w- C:\rsit
2014-05-22 18:15 . 2014-05-22 18:17 -------- d-----w- C:\AdwCleaner
2014-05-22 17:04 . 2014-05-22 21:32 -------- d-----w- c:\program files\trend micro
2014-05-21 20:22 . 2014-05-25 16:20 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-05-21 20:21 . 2014-05-25 16:21 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-05-19 18:57 . 2014-05-19 18:59 -------- d-----w- c:\windows\system32\MRT
2014-05-17 21:05 . 2014-05-17 21:05 -------- d-----w- c:\programdata\ATI
2014-05-17 13:55 . 2014-05-17 13:54 465624 ----a-w- c:\windows\system32\drivers\RtsPer.sys
2014-05-17 13:55 . 2014-05-17 13:54 291544 ----a-w- c:\windows\system32\drivers\RtsP2Stor.sys
2014-05-17 13:55 . 2014-05-17 13:54 271064 ----a-w- c:\windows\system32\drivers\RtsUStor.sys
2014-05-17 13:55 . 2014-05-17 13:54 9889352 ----a-w- c:\windows\SysWow64\RsCRIcon.dll
2014-05-17 12:52 . 2014-05-17 12:52 -------- d-----w- c:\users\MV\AppData\Roaming\InstallShield
2014-05-17 12:43 . 2014-05-17 12:43 -------- d-----w- c:\program files (x86)\AMD AVT
2014-05-17 11:58 . 2014-05-17 11:57 58536 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2014-05-15 18:30 . 2014-05-15 18:30 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-05-15 18:26 . 2014-05-15 18:26 -------- d-----w- c:\users\MV\AppData\Local\Androsoft,_s.r.o
2014-05-15 18:25 . 2014-05-15 18:25 -------- d-----w- c:\program files (x86)\Androsoft
2014-05-14 06:41 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll
2014-05-14 06:41 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll
2014-05-14 06:41 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-14 06:41 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-05-13 06:15 . 2014-05-13 06:15 -------- d-----w- c:\users\MV\AppData\Local\Adobe
2014-05-09 19:42 . 2014-05-09 19:42 -------- d-----w- c:\users\MV\AppData\Local\Microsoft Games
2014-05-07 04:33 . 2014-05-14 16:05 -------- d-s---w- c:\windows\system32\CompatTel
2014-05-06 18:33 . 2014-05-06 18:33 -------- d-----w- c:\users\MV\AppData\Local\Hewlett-Packard_Developme
2014-05-04 18:51 . 2014-05-04 18:51 -------- d-----w- c:\programdata\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-04-30 22:05 . 2014-05-01 17:48 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2014-04-29 04:55 . 2014-03-06 06:00 359936 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2014-04-29 04:55 . 2014-03-06 05:50 257536 ----a-w- c:\program files (x86)\Internet Explorer\IEShims.dll
2014-04-29 04:55 . 2014-03-06 08:32 574976 ----a-w- c:\windows\system32\ieui.dll
2014-04-29 04:55 . 2014-03-06 08:57 548352 ----a-w- c:\windows\system32\vbscript.dll
2014-04-29 04:55 . 2014-03-06 08:02 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-04-29 04:55 . 2014-03-08 02:34 293072 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2014-04-29 04:55 . 2014-03-06 08:36 222720 ----a-w- c:\program files\Internet Explorer\ielowutil.exe
2014-04-29 04:55 . 2014-03-06 07:44 482816 ----a-w- c:\program files\Internet Explorer\ieinstal.exe
2014-04-29 04:55 . 2014-03-06 07:44 222720 ----a-w- c:\program files (x86)\Internet Explorer\ielowutil.exe
2014-04-29 04:55 . 2014-03-06 07:03 470016 ----a-w- c:\program files (x86)\Internet Explorer\ieinstal.exe
2014-04-26 16:25 . 2014-04-26 16:25 -------- d-----w- c:\users\MV\AppData\Local\ElevatedDiagnostics
2014-04-26 15:32 . 2014-04-26 15:32 -------- d-----w- c:\programdata\SZCCID
2014-04-26 15:32 . 2014-04-26 15:32 -------- d-----w- c:\program files (x86)\AlcorMicro
2014-04-25 19:21 . 2014-04-25 19:21 -------- d-----w- c:\users\MV\AppData\Roaming\FLEXnet
2014-04-25 19:04 . 2014-04-25 19:04 -------- d-----w- c:\users\MV\AppData\Roaming\Vodafone
2014-04-25 19:04 . 2014-04-25 19:04 -------- d-----w- c:\programdata\Vodafone
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\programdata\Macrovision
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\programdata\FLEXnet
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\program files (x86)\Vodafone
2014-04-25 19:02 . 2014-05-03 14:47 -------- d-----w- c:\users\MV\AppData\Local\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-17 12:52 . 2013-12-13 22:48 73216 ----a-w- c:\windows\system32\wltrynt.dll
2014-05-17 12:52 . 2013-12-13 22:48 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2014-05-17 12:52 . 2013-12-13 22:48 35344 ----a-w- c:\windows\system32\drivers\npf.sys
2014-05-17 12:52 . 2013-12-13 22:48 441 ----a-w- c:\windows\system32\vcredist_x64.bat
2014-05-17 12:52 . 2013-12-13 22:48 7627264 ----a-w- c:\windows\system32\BCMWLCPL.CPL
2014-05-17 12:52 . 2013-12-13 22:48 4668928 ----a-w- c:\windows\system32\bcmttls.dll
2014-05-17 12:52 . 2013-12-13 22:49 975360 ----a-w- c:\windows\system32\BCMLogon.dll
2014-05-17 12:52 . 2013-12-13 22:48 23760 ----a-w- c:\windows\system32\drivers\bcm42rly.sys
2014-05-17 12:52 . 2013-12-13 22:48 4961800 ----a-w- c:\windows\SysWow64\vcredist_x64.exe
2014-05-17 12:52 . 2013-12-13 22:48 446 ----a-w- c:\windows\SysWow64\vcredist_x64.bat
2014-05-17 12:51 . 2013-12-13 22:48 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2014-05-17 12:51 . 2013-12-13 22:49 96560 ----a-w- c:\windows\system32\bcmwlcoi.dll
2014-05-17 12:51 . 2013-12-13 22:49 8030928 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2014-05-17 12:51 . 2013-12-13 22:49 4393984 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2014-05-17 12:51 . 2013-12-13 22:49 3660800 ----a-w- c:\windows\system32\bcmihvui64.dll
2014-05-17 12:33 . 2013-12-13 22:41 97984 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-05-17 12:33 . 2013-12-13 22:41 7256496 ----a-w- c:\windows\system32\atiumd64.dll
2014-05-17 12:33 . 2013-12-13 22:41 6767240 ----a-w- c:\windows\system32\atiumd6a.dll
2014-05-17 12:33 . 2013-12-13 22:41 6189416 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-05-17 12:33 . 2013-12-13 22:41 6176008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-05-17 12:33 . 2013-12-13 22:41 142792 ----a-w- c:\windows\system32\atiuxp64.dll
2014-05-17 12:33 . 2013-12-13 22:41 125824 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-05-17 12:33 . 2013-12-13 22:41 114488 ----a-w- c:\windows\system32\atiu9p64.dll
2014-05-17 12:33 . 2013-12-13 22:41 9464840 ----a-w- c:\windows\system32\atidxx64.dll
2014-05-17 12:33 . 2013-12-13 22:41 8215992 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-05-17 12:33 . 2013-12-13 22:41 1237200 ----a-w- c:\windows\system32\aticfx64.dll
2014-05-17 12:33 . 2013-12-13 22:41 1030128 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-04-21 08:30 . 2014-04-21 08:30 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-04-21 08:30 . 2014-04-21 08:30 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-04-21 08:30 . 2014-04-21 08:30 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-04-21 08:30 . 2014-04-21 08:30 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-04-21 08:30 . 2014-04-21 08:30 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-04-21 08:30 . 2014-04-21 08:30 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-04-21 08:30 . 2014-04-21 08:30 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-04-21 08:30 . 2014-04-21 08:30 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-04-21 08:30 . 2014-04-21 08:30 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-04-21 08:30 . 2014-04-21 08:30 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-04-21 08:30 . 2014-04-21 08:30 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-04-21 08:30 . 2014-04-21 08:30 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-04-21 08:30 . 2014-04-21 08:30 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-04-21 08:30 . 2014-04-21 08:30 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-04-21 08:30 . 2014-04-21 08:30 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-04-21 08:30 . 2014-04-21 08:30 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-04-21 08:30 . 2014-04-21 08:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-04-21 08:30 . 2014-04-21 08:30 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-04-21 08:30 . 2014-04-21 08:30 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-04-21 08:30 . 2014-04-21 08:30 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-04-21 08:30 . 2014-04-21 08:30 247808 ----a-w- c:\windows\system32\msls31.dll
2014-04-21 08:30 . 2014-04-21 08:30 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-04-21 08:30 . 2014-04-21 08:30 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-04-21 08:30 . 2014-04-21 08:30 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-04-21 08:30 . 2014-04-21 08:30 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-04-21 08:30 . 2014-04-21 08:30 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-04-21 08:30 . 2014-04-21 08:30 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-04-21 08:30 . 2014-04-21 08:30 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-04-21 08:30 . 2014-04-21 08:30 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-04-21 08:30 . 2014-04-21 08:30 413696 ----a-w- c:\windows\system32\html.iec
2014-04-21 08:30 . 2014-04-21 08:30 81408 ----a-w- c:\windows\system32\icardie.dll
2014-04-21 08:30 . 2014-04-21 08:30 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-04-21 08:30 . 2014-04-21 08:30 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2014-04-21 08:30 . 2014-04-21 08:30 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-04-21 08:30 . 2014-04-21 08:30 235520 ----a-w- c:\windows\system32\url.dll
2014-04-21 08:30 . 2014-04-21 08:30 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-04-21 08:30 . 2014-04-21 08:30 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-04-21 08:30 . 2014-04-21 08:30 143872 ----a-w- c:\windows\system32\wextract.exe
2014-04-21 08:30 . 2014-04-21 08:30 101376 ----a-w- c:\windows\system32\inseng.dll
2014-04-21 08:30 . 2014-04-21 08:30 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-04-21 08:30 . 2014-04-21 08:30 147968 ----a-w- c:\windows\system32\occache.dll
2014-04-21 08:30 . 2014-04-21 08:30 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-04-21 08:30 . 2014-04-21 08:30 774144 ----a-w- c:\windows\system32\jscript.dll
2014-04-21 08:30 . 2014-04-21 08:30 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-04-21 08:30 . 2014-04-21 08:30 13824 ----a-w- c:\windows\system32\mshta.exe
2014-04-21 08:30 . 2014-04-21 08:30 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-04-19 19:51 . 2014-04-19 19:52 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-31 20:46 . 2014-03-31 20:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2014-03-31 20:46 . 2014-03-31 20:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2014-03-31 07:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-04 09:44 . 2014-04-19 20:10 362496 ----a-w- c:\windows\system32\wow64win.dll
2014-03-04 09:44 . 2014-04-19 20:10 243712 ----a-w- c:\windows\system32\wow64.dll
2014-03-04 09:44 . 2014-04-19 20:10 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2014-03-04 09:44 . 2014-05-14 04:46 340992 ----a-w- c:\windows\system32\schannel.dll
2014-03-04 09:44 . 2014-04-19 20:10 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2014-03-04 09:44 . 2014-04-19 20:10 1163264 ----a-w- c:\windows\system32\kernel32.dll
2014-03-04 09:17 . 2014-05-14 04:46 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-03-04 09:17 . 2014-04-19 20:10 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2014-03-04 09:17 . 2014-04-19 20:10 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-03-04 09:16 . 2014-04-19 20:10 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2014-03-04 09:16 . 2014-04-19 20:10 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2014-03-04 08:09 . 2014-04-19 20:10 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2014-03-04 08:09 . 2014-04-19 20:10 2048 ----a-w- c:\windows\SysWow64\user.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\+1TBIcon]
@="{B9C55E85-DED6-4911-82F3-83CF1CAB2898}"
[HKEY_CLASSES_ROOT\CLSID\{B9C55E85-DED6-4911-82F3-83CF1CAB2898}]
2013-08-23 02:24 133592 ----a-w- c:\program files (x86)\Hewlett-Packard\HP Trust Circles\tbicon.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2013-07-18 683656]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2013-09-18 185144]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2013-08-01 337184]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-07-24 77088]
"YouCam Tray"="c:\program files (x86)\CyberLink\YouCam\YouCamTray.exe" [2013-06-24 167488]
"CLMLServer_For_P2G8"="c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2013-08-05 111576]
"CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2013-08-07 490760]
"HP File Sanitizer"="c:\program files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe" [2013-08-07 2213592]
"MobileBroadband"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2013-03-25 76288]
"VmbNotifier"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe" [2013-03-25 1861632]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-04 766208]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-12-7 1393528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTSPER;Realtek PCIE Card Reader - PER;c:\windows\system32\DRIVERS\RtsPer.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPer.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\system32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PinFile;PinFile;c:\windows\system32\DRIVERS\PinFile.sys;c:\windows\SYSNATIVE\DRIVERS\PinFile.sys [x]
S0 SDDisk2K;SDDisk2K;c:\windows\system32\DRIVERS\SDDisk2K.sys;c:\windows\SYSNATIVE\DRIVERS\SDDisk2K.sys [x]
S0 SDDToki;SDDToki;c:\windows\system32\DRIVERS\SDDToki.sys;c:\windows\SYSNATIVE\DRIVERS\SDDToki.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 CreoService;HP Trust Circles Service;c:\program files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe;c:\program files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [x]
S2 CtAgentService;Absolute Software Agent Service;c:\program files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe;c:\program files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [x]
S2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [x]
S2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [x]
S2 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 FLCDLOCK;HP Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HPFSService;HP File Sanitizer;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S2 VmbService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]
S3 IceKore;IceKore;c:\windows\system32\DRIVERS\IceKore.sys;c:\windows\SYSNATIVE\DRIVERS\IceKore.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SmbDrv;SmbDrv;c:\windows\system32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-05-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 19:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\+1TBIcon]
@="{B9C55E85-DED6-4911-82F3-83CF1CAB2898}"
[HKEY_CLASSES_ROOT\CLSID\{B9C55E85-DED6-4911-82F3-83CF1CAB2898}]
2013-08-23 02:24 147928 ----a-w- c:\program files\Hewlett-Packard\HP Trust Circles\tbicon.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CryptoMill Refresh"="c:\program files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh" [X]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-08-16 1703424]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11\WLTRAY.exe" [2014-05-17 8628224]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="c:\program files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2014-05-13 21720]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\MV\AppData\Roaming\Mozilla\Firefox\Profiles\z2f4s107.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM_Wow6432Node-ActiveSetup-{438363A8-F486-4C37-834C-4955773CB3D3} - msiexec
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_228_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_228_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-05-25 18:53:32
ComboFix-quarantined-files.txt 2014-05-25 16:53
.
Před spuštěním: Volných bajtů: 292 531 249 152
Po spuštění: Volných bajtů: 291 970 289 664
.
- - End Of File - - 8803AE8C52F99284E1906178DC96E3BA
A36C5E4F47E84449FF07ED3517B43A31

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Bohužel to nepomohlo, stahování je pořád stejně pomalé. Níže připojuji log, který připravil Combofix po restartování.

ComboFix 14-05-19.01 - MV 25.05.2014 19:48:10.3.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3273.1846 [GMT 2:00]
Spuštěný z: c:\users\MV\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\MV\Desktop\CFScript.txt
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personální firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-04-25 do 2014-05-25 )))))))))))))))))))))))))))))))
.
.
2014-05-23 19:54 . 2014-04-30 23:20 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5FE0B1AD-2178-4D7A-A065-6627D03F3758}\mpengine.dll
2014-05-22 21:31 . 2014-05-22 21:32 -------- d-----w- C:\rsit
2014-05-22 18:15 . 2014-05-22 18:17 -------- d-----w- C:\AdwCleaner
2014-05-22 17:04 . 2014-05-22 21:32 -------- d-----w- c:\program files\trend micro
2014-05-21 20:22 . 2014-05-25 16:20 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-05-21 20:21 . 2014-05-25 16:21 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-05-19 18:57 . 2014-05-19 18:59 -------- d-----w- c:\windows\system32\MRT
2014-05-17 21:05 . 2014-05-17 21:05 -------- d-----w- c:\programdata\ATI
2014-05-17 13:55 . 2014-05-17 13:54 465624 ----a-w- c:\windows\system32\drivers\RtsPer.sys
2014-05-17 13:55 . 2014-05-17 13:54 291544 ----a-w- c:\windows\system32\drivers\RtsP2Stor.sys
2014-05-17 13:55 . 2014-05-17 13:54 271064 ----a-w- c:\windows\system32\drivers\RtsUStor.sys
2014-05-17 13:55 . 2014-05-17 13:54 9889352 ----a-w- c:\windows\SysWow64\RsCRIcon.dll
2014-05-17 12:52 . 2014-05-17 12:52 -------- d-----w- c:\users\MV\AppData\Roaming\InstallShield
2014-05-17 12:43 . 2014-05-17 12:43 -------- d-----w- c:\program files (x86)\AMD AVT
2014-05-17 11:58 . 2014-05-17 11:57 58536 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2014-05-15 18:30 . 2014-05-15 18:30 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-05-15 18:26 . 2014-05-15 18:26 -------- d-----w- c:\users\MV\AppData\Local\Androsoft,_s.r.o
2014-05-15 18:25 . 2014-05-15 18:25 -------- d-----w- c:\program files (x86)\Androsoft
2014-05-14 06:41 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll
2014-05-14 06:41 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll
2014-05-14 06:41 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-14 06:41 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-05-13 06:15 . 2014-05-13 06:15 -------- d-----w- c:\users\MV\AppData\Local\Adobe
2014-05-09 19:42 . 2014-05-09 19:42 -------- d-----w- c:\users\MV\AppData\Local\Microsoft Games
2014-05-07 04:33 . 2014-05-14 16:05 -------- d-s---w- c:\windows\system32\CompatTel
2014-05-06 18:33 . 2014-05-06 18:33 -------- d-----w- c:\users\MV\AppData\Local\Hewlett-Packard_Developme
2014-05-04 18:51 . 2014-05-04 18:51 -------- d-----w- c:\programdata\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-04-30 22:05 . 2014-05-01 17:48 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2014-04-29 04:55 . 2014-03-06 06:00 359936 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2014-04-29 04:55 . 2014-03-06 05:50 257536 ----a-w- c:\program files (x86)\Internet Explorer\IEShims.dll
2014-04-29 04:55 . 2014-03-06 08:32 574976 ----a-w- c:\windows\system32\ieui.dll
2014-04-29 04:55 . 2014-03-06 08:57 548352 ----a-w- c:\windows\system32\vbscript.dll
2014-04-29 04:55 . 2014-03-06 08:02 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-04-29 04:55 . 2014-03-08 02:34 293072 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2014-04-29 04:55 . 2014-03-06 08:36 222720 ----a-w- c:\program files\Internet Explorer\ielowutil.exe
2014-04-29 04:55 . 2014-03-06 07:44 482816 ----a-w- c:\program files\Internet Explorer\ieinstal.exe
2014-04-29 04:55 . 2014-03-06 07:44 222720 ----a-w- c:\program files (x86)\Internet Explorer\ielowutil.exe
2014-04-29 04:55 . 2014-03-06 07:03 470016 ----a-w- c:\program files (x86)\Internet Explorer\ieinstal.exe
2014-04-26 16:25 . 2014-04-26 16:25 -------- d-----w- c:\users\MV\AppData\Local\ElevatedDiagnostics
2014-04-26 15:32 . 2014-04-26 15:32 -------- d-----w- c:\programdata\SZCCID
2014-04-26 15:32 . 2014-04-26 15:32 -------- d-----w- c:\program files (x86)\AlcorMicro
2014-04-25 19:21 . 2014-04-25 19:21 -------- d-----w- c:\users\MV\AppData\Roaming\FLEXnet
2014-04-25 19:04 . 2014-04-25 19:04 -------- d-----w- c:\users\MV\AppData\Roaming\Vodafone
2014-04-25 19:04 . 2014-04-25 19:04 -------- d-----w- c:\programdata\Vodafone
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\programdata\Macrovision
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\programdata\FLEXnet
2014-04-25 19:03 . 2014-04-25 19:03 -------- d-----w- c:\program files (x86)\Vodafone
2014-04-25 19:02 . 2014-05-03 14:47 -------- d-----w- c:\users\MV\AppData\Local\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-17 12:52 . 2013-12-13 22:48 73216 ----a-w- c:\windows\system32\wltrynt.dll
2014-05-17 12:52 . 2013-12-13 22:48 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2014-05-17 12:52 . 2013-12-13 22:48 35344 ----a-w- c:\windows\system32\drivers\npf.sys
2014-05-17 12:52 . 2013-12-13 22:48 441 ----a-w- c:\windows\system32\vcredist_x64.bat
2014-05-17 12:52 . 2013-12-13 22:48 7627264 ----a-w- c:\windows\system32\BCMWLCPL.CPL
2014-05-17 12:52 . 2013-12-13 22:48 4668928 ----a-w- c:\windows\system32\bcmttls.dll
2014-05-17 12:52 . 2013-12-13 22:49 975360 ----a-w- c:\windows\system32\BCMLogon.dll
2014-05-17 12:52 . 2013-12-13 22:48 23760 ----a-w- c:\windows\system32\drivers\bcm42rly.sys
2014-05-17 12:52 . 2013-12-13 22:48 4961800 ----a-w- c:\windows\SysWow64\vcredist_x64.exe
2014-05-17 12:52 . 2013-12-13 22:48 446 ----a-w- c:\windows\SysWow64\vcredist_x64.bat
2014-05-17 12:51 . 2013-12-13 22:48 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2014-05-17 12:51 . 2013-12-13 22:49 96560 ----a-w- c:\windows\system32\bcmwlcoi.dll
2014-05-17 12:51 . 2013-12-13 22:49 8030928 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2014-05-17 12:51 . 2013-12-13 22:49 4393984 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2014-05-17 12:51 . 2013-12-13 22:49 3660800 ----a-w- c:\windows\system32\bcmihvui64.dll
2014-05-17 12:33 . 2013-12-13 22:41 97984 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-05-17 12:33 . 2013-12-13 22:41 7256496 ----a-w- c:\windows\system32\atiumd64.dll
2014-05-17 12:33 . 2013-12-13 22:41 6767240 ----a-w- c:\windows\system32\atiumd6a.dll
2014-05-17 12:33 . 2013-12-13 22:41 6189416 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-05-17 12:33 . 2013-12-13 22:41 6176008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-05-17 12:33 . 2013-12-13 22:41 142792 ----a-w- c:\windows\system32\atiuxp64.dll
2014-05-17 12:33 . 2013-12-13 22:41 125824 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-05-17 12:33 . 2013-12-13 22:41 114488 ----a-w- c:\windows\system32\atiu9p64.dll
2014-05-17 12:33 . 2013-12-13 22:41 9464840 ----a-w- c:\windows\system32\atidxx64.dll
2014-05-17 12:33 . 2013-12-13 22:41 8215992 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-05-17 12:33 . 2013-12-13 22:41 1237200 ----a-w- c:\windows\system32\aticfx64.dll
2014-05-17 12:33 . 2013-12-13 22:41 1030128 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-04-21 08:30 . 2014-04-21 08:30 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-04-21 08:30 . 2014-04-21 08:30 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-04-21 08:30 . 2014-04-21 08:30 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-04-21 08:30 . 2014-04-21 08:30 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-04-21 08:30 . 2014-04-21 08:30 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-04-21 08:30 . 2014-04-21 08:30 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-04-21 08:30 . 2014-04-21 08:30 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-04-21 08:30 . 2014-04-21 08:30 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-04-21 08:30 . 2014-04-21 08:30 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-04-21 08:30 . 2014-04-21 08:30 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-04-21 08:30 . 2014-04-21 08:30 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-04-21 08:30 . 2014-04-21 08:30 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-04-21 08:30 . 2014-04-21 08:30 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-04-21 08:30 . 2014-04-21 08:30 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-04-21 08:30 . 2014-04-21 08:30 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-04-21 08:30 . 2014-04-21 08:30 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-04-21 08:30 . 2014-04-21 08:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-04-21 08:30 . 2014-04-21 08:30 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-04-21 08:30 . 2014-04-21 08:30 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-04-21 08:30 . 2014-04-21 08:30 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-04-21 08:30 . 2014-04-21 08:30 247808 ----a-w- c:\windows\system32\msls31.dll
2014-04-21 08:30 . 2014-04-21 08:30 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-04-21 08:30 . 2014-04-21 08:30 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-04-21 08:30 . 2014-04-21 08:30 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-04-21 08:30 . 2014-04-21 08:30 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-04-21 08:30 . 2014-04-21 08:30 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-04-21 08:30 . 2014-04-21 08:30 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-04-21 08:30 . 2014-04-21 08:30 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-04-21 08:30 . 2014-04-21 08:30 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-04-21 08:30 . 2014-04-21 08:30 413696 ----a-w- c:\windows\system32\html.iec
2014-04-21 08:30 . 2014-04-21 08:30 81408 ----a-w- c:\windows\system32\icardie.dll
2014-04-21 08:30 . 2014-04-21 08:30 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-04-21 08:30 . 2014-04-21 08:30 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2014-04-21 08:30 . 2014-04-21 08:30 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-04-21 08:30 . 2014-04-21 08:30 235520 ----a-w- c:\windows\system32\url.dll
2014-04-21 08:30 . 2014-04-21 08:30 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-04-21 08:30 . 2014-04-21 08:30 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-04-21 08:30 . 2014-04-21 08:30 143872 ----a-w- c:\windows\system32\wextract.exe
2014-04-21 08:30 . 2014-04-21 08:30 101376 ----a-w- c:\windows\system32\inseng.dll
2014-04-21 08:30 . 2014-04-21 08:30 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-04-21 08:30 . 2014-04-21 08:30 147968 ----a-w- c:\windows\system32\occache.dll
2014-04-21 08:30 . 2014-04-21 08:30 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-04-21 08:30 . 2014-04-21 08:30 774144 ----a-w- c:\windows\system32\jscript.dll
2014-04-21 08:30 . 2014-04-21 08:30 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-04-21 08:30 . 2014-04-21 08:30 13824 ----a-w- c:\windows\system32\mshta.exe
2014-04-21 08:30 . 2014-04-21 08:30 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-04-19 19:51 . 2014-04-19 19:52 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-31 20:46 . 2014-03-31 20:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2014-03-31 20:46 . 2014-03-31 20:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2014-03-31 07:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-04 09:44 . 2014-04-19 20:10 362496 ----a-w- c:\windows\system32\wow64win.dll
2014-03-04 09:44 . 2014-04-19 20:10 243712 ----a-w- c:\windows\system32\wow64.dll
2014-03-04 09:44 . 2014-04-19 20:10 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2014-03-04 09:44 . 2014-05-14 04:46 340992 ----a-w- c:\windows\system32\schannel.dll
2014-03-04 09:44 . 2014-04-19 20:10 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2014-03-04 09:44 . 2014-04-19 20:10 1163264 ----a-w- c:\windows\system32\kernel32.dll
2014-03-04 09:17 . 2014-05-14 04:46 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2014-03-04 09:17 . 2014-04-19 20:10 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2014-03-04 09:17 . 2014-04-19 20:10 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-03-04 09:16 . 2014-04-19 20:10 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2014-03-04 09:16 . 2014-04-19 20:10 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2014-03-04 08:09 . 2014-04-19 20:10 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2014-03-04 08:09 . 2014-04-19 20:10 2048 ----a-w- c:\windows\SysWow64\user.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\+1TBIcon]
@="{B9C55E85-DED6-4911-82F3-83CF1CAB2898}"
[HKEY_CLASSES_ROOT\CLSID\{B9C55E85-DED6-4911-82F3-83CF1CAB2898}]
2013-08-23 02:24 133592 ----a-w- c:\program files (x86)\Hewlett-Packard\HP Trust Circles\tbicon.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2013-07-18 683656]
"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2013-09-18 185144]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2013-08-01 337184]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-07-24 77088]
"YouCam Tray"="c:\program files (x86)\CyberLink\YouCam\YouCamTray.exe" [2013-06-24 167488]
"CLMLServer_For_P2G8"="c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2013-08-05 111576]
"CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2013-08-07 490760]
"HP File Sanitizer"="c:\program files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe" [2013-08-07 2213592]
"MobileBroadband"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2013-03-25 76288]
"VmbNotifier"="c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe" [2013-03-25 1861632]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-04 766208]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2012-12-7 1393528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTSPER;Realtek PCIE Card Reader - PER;c:\windows\system32\DRIVERS\RtsPer.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPer.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\system32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PinFile;PinFile;c:\windows\system32\DRIVERS\PinFile.sys;c:\windows\SYSNATIVE\DRIVERS\PinFile.sys [x]
S0 SDDisk2K;SDDisk2K;c:\windows\system32\DRIVERS\SDDisk2K.sys;c:\windows\SYSNATIVE\DRIVERS\SDDisk2K.sys [x]
S0 SDDToki;SDDToki;c:\windows\system32\DRIVERS\SDDToki.sys;c:\windows\SYSNATIVE\DRIVERS\SDDToki.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 CreoService;HP Trust Circles Service;c:\program files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe;c:\program files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [x]
S2 CtAgentService;Absolute Software Agent Service;c:\program files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe;c:\program files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [x]
S2 CyberLink PowerDVD 12 Media Server Monitor Service;CyberLink PowerDVD 12 Media Server Monitor Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [x]
S2 CyberLink PowerDVD 12 Media Server Service;CyberLink PowerDVD 12 Media Server Service;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe;c:\program files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [x]
S2 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 FLCDLOCK;HP Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HPFSService;HP File Sanitizer;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S2 VmbService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]
S3 IceKore;IceKore;c:\windows\system32\DRIVERS\IceKore.sys;c:\windows\SYSNATIVE\DRIVERS\IceKore.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SmbDrv;SmbDrv;c:\windows\system32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2014-05-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-29 19:39]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\+1TBIcon]
@="{B9C55E85-DED6-4911-82F3-83CF1CAB2898}"
[HKEY_CLASSES_ROOT\CLSID\{B9C55E85-DED6-4911-82F3-83CF1CAB2898}]
2013-08-23 02:24 147928 ----a-w- c:\program files\Hewlett-Packard\HP Trust Circles\tbicon.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CryptoMill Refresh"="c:\program files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh" [X]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-08-16 1703424]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11\WLTRAY.exe" [2014-05-17 8628224]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="c:\program files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2014-05-13 21720]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\MV\AppData\Roaming\Mozilla\Firefox\Profiles\z2f4s107.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
c:\windows\SysWOW64\RunDll32.exe
.
**************************************************************************
.
Celkový čas: 2014-05-25 20:01:16 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-05-25 18:01
ComboFix2.txt 2014-05-25 16:53
.
Před spuštěním: Volných bajtů: 292 057 759 744
Po spuštění: Volných bajtů: 291 717 111 808
.
- - End Of File - - EB3B4BA6D96BC61A128D597ED3DEE2AB
A36C5E4F47E84449FF07ED3517B43A31

Log je již OK. CF odinstalujte pomocí T-Cleaneru: http://vyosek.tym.cz/pro_usery/T-Cleaner.exe. Zkuste restartovat modem, případně jiný síť.prvek v datové cestě.