VIRY.CZ

Prosím o kontrolu logu

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-08-25 19:59:21
Microsoft Windows 8 Pro
System drive C: has 207 GB (42%) free of 487 GB
Total RAM: 6102 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:59:23, on 25. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17054)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MSStp] C:\WINDOWS\system32\msstp.vbe
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe /REMINDER
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.ukairmm.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star International - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Splashtop Software Updater Service (SSUService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9901 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
dashost.exe {86a934fe-6c6f-492b-b17fb848b1211bfb}
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\WINDOWS\System32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
-h
/QuitInfo:0000000000000850;000000000000085C;
/loadhooks /Parent:0000000000000d1c
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"SRFeature.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
taskhost.exe $(Arg0)
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3680 CREDAT:267521 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3680 CREDAT:3675405 /prefetch:2
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3014937657-3758588925-1461075283-10007_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3014937657-3758588925-1461075283-10007 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 556 560 568 65536 564

C:\WINDOWS\system32\msiexec.exe /V
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YRMSPBB2\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-12-14 441968]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2014-08-14 1937600]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"MSStp"=C:\WINDOWS\system32\msstp.vbe []
"Live Update"=C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe [2014-07-01 579024]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-08-01 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SplashtopRemoteService]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\WINDOWS\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\WINDOWS\SysWOW64\tsc2_codec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-08-25 19:59:21 ----D---- C:\rsit
2014-08-25 19:32:49 ----D---- C:\Users\David\AppData\Roaming\iSafe
2014-08-25 18:47:26 ----D---- C:\Program Files\iPod
2014-08-25 18:47:25 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-25 18:47:25 ----D---- C:\Program Files\iTunes
2014-08-25 18:47:25 ----D---- C:\Program Files (x86)\iTunes
2014-08-25 18:45:44 ----SHD---- C:\Config.Msi
2014-08-25 18:08:24 ----D---- C:\Program Files\CCleaner
2014-08-17 09:49:11 ----D---- C:\Program Files (x86)\Movies App
2014-08-16 14:10:59 ----D---- C:\ProgramData\InstallShield
2014-08-16 14:10:45 ----D---- C:\Program Files (x86)\THQ
2014-08-14 17:41:16 ----D---- C:\ProgramData\PopCap Games
2014-08-14 17:33:06 ----D---- C:\ProgramData\PogoDGC
2014-08-13 16:46:48 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-08-13 16:43:14 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-08-13 16:43:14 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\win32k.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\cdd.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-08-13 15:24:31 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-08-13 15:24:28 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-08-13 15:24:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-08-13 15:24:24 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\jscript.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 15:24:18 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-08-13 15:24:18 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 15:24:10 ----A---- C:\WINDOWS\system32\twinui.dll
2014-08-13 15:24:08 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-08-13 15:24:06 ----A---- C:\WINDOWS\system32\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\consent.exe
2014-08-13 15:24:02 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-08-13 15:24:01 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-08-05 10:11:51 ----D---- C:\ProgramData\Pinnacle
2014-08-05 10:11:43 ----D---- C:\Program Files (x86)\Pinnacle
2014-07-26 17:26:16 ----D---- C:\Program Files (x86)\LogMeIn Hamachi

======List of files/folders modified in the last 1 month======

2014-08-25 19:59:22 ----D---- C:\Program Files\trend micro
2014-08-25 19:59:18 ----D---- C:\WINDOWS\temp
2014-08-25 19:55:54 ----D---- C:\WINDOWS\Prefetch
2014-08-25 19:02:02 ----D---- C:\WINDOWS\system32\sru
2014-08-25 18:49:10 ----D---- C:\ProgramData\NVIDIA
2014-08-25 18:48:16 ----SHD---- C:\WINDOWS\Installer
2014-08-25 18:48:09 ----RD---- C:\WINDOWS\System32
2014-08-25 18:48:09 ----D---- C:\WINDOWS\SysWOW64
2014-08-25 18:47:26 ----RD---- C:\Program Files
2014-08-25 18:47:25 ----RD---- C:\Program Files (x86)
2014-08-25 18:47:25 ----D---- C:\ProgramData
2014-08-25 18:32:03 ----D---- C:\WINDOWS\SoftwareDistribution
2014-08-25 18:31:38 ----D---- C:\Windows
2014-08-25 18:31:36 ----D---- C:\WINDOWS\system32\Drivers
2014-08-25 18:31:36 ----D---- C:\WINDOWS\PLA
2014-08-25 18:29:40 ----D---- C:\WINDOWS\Inf
2014-08-25 18:14:27 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-25 18:11:00 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-08-25 18:11:00 ----D---- C:\Program Files (x86)\Steam
2014-08-25 18:10:39 ----D---- C:\WINDOWS\Panther
2014-08-25 18:10:26 ----D---- C:\WINDOWS\Logs
2014-08-25 18:10:26 ----D---- C:\WINDOWS\debug
2014-08-25 18:10:25 ----D---- C:\WINDOWS\Minidump
2014-08-25 18:08:26 ----D---- C:\WINDOWS\system32\Tasks
2014-08-25 17:52:02 ----D---- C:\Users\David\AppData\Roaming\Skype
2014-08-25 16:00:04 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-25 15:25:32 ----D---- C:\Users\David\AppData\Roaming\.minecraft
2014-08-21 20:21:51 ----D---- C:\Users\David\AppData\Roaming\Seznam.cz
2014-08-21 20:21:20 ----D---- C:\Program Files (x86)\Seznam.cz
2014-08-21 10:31:25 ----D---- C:\WINDOWS\system32\config
2014-08-17 13:14:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-16 14:13:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-16 14:10:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2014-08-16 13:55:25 ----SHD---- C:\System Volume Information
2014-08-16 13:54:55 ----D---- C:\Program Files (x86)\Common Files
2014-08-16 13:38:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-14 14:13:46 ----D---- C:\WINDOWS\rescache
2014-08-14 14:04:05 ----D---- C:\WINDOWS\WinSxS
2014-08-14 12:51:07 ----RSD---- C:\WINDOWS\assembly
2014-08-14 11:07:12 ----D---- C:\WINDOWS\system32\catroot2
2014-08-14 08:29:55 ----D---- C:\WINDOWS\system32\catroot
2014-08-14 08:28:13 ----D---- C:\WINDOWS\AUInstallAgent
2014-08-14 08:28:01 ----HD---- C:\Program Files\WindowsApps
2014-08-13 21:44:24 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-08-13 21:44:24 ----D---- C:\WINDOWS\system32\cs-CZ
2014-08-13 21:44:22 ----D---- C:\Program Files\Internet Explorer
2014-08-13 21:44:07 ----SD---- C:\WINDOWS\system32\CompatTel
2014-08-13 21:44:06 ----RD---- C:\WINDOWS\ToastData
2014-08-13 21:44:00 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-13 17:00:41 ----D---- C:\WINDOWS\CbsTemp
2014-08-13 16:58:55 ----D---- C:\WINDOWS\system32\MRT
2014-08-13 16:56:36 ----A---- C:\WINDOWS\system32\MRT.exe
2014-08-13 16:46:38 ----D---- C:\ProgramData\Microsoft Help
2014-08-06 15:56:58 ----D---- C:\ProgramData\Skype
2014-08-02 02:15:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-27 08:42:12 ----D---- C:\WINDOWS\Tasks
2014-07-26 17:24:47 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-26 17:24:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 dtsoftbus01;@oem6.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-11-04 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2014-07-21 46136]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;Ovladač miniportu NDIS pro řadič Qualcomm Atheros AR813x/AR815x PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2012-06-02 100864]
R3 MEIx64;@oem2.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-17 62784]
R3 NVHDA;@oem8.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-07-10 11242784]
R3 sthid;@oem11.inf,%splashtop.SvcDesc%;Splashtop Virtual Hid; C:\WINDOWS\System32\drivers\sthid.sys [2014-06-24 21216]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
S3 NTIOLib_1_0_4;NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [2010-10-22 14136]
S3 USBAAPL64;@oem4.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2012-07-26 57344]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdFs;WUDFWpdFs; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdMtp;WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2014-03-27 83952]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-07-10 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 SplashtopRemoteService;Splashtop® Remote Service; C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe [2014-06-24 790880]
R2 SSUService;Splashtop Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [2013-10-09 609056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-07-10 413472]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-08-01 641352]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-22 194032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-14 833728]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v3.308 - Report created 25/08/2014 at 21:19:47
# Updated 20/08/2014 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : David - DAVID-PC
# Running from : C:\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FEGR7TGJ\adwcleaner_3.308.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\Movies App
Folder Deleted : C:\Program Files (x86)\SmartTweak
Folder Deleted : C:\Users\David\AppData\Local\iLivid
Folder Deleted : C:\Users\David\AppData\Roaming\iSafe
Folder Deleted : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
File Deleted : C:\Users\David\daemonprocess.txt
File Deleted : C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk
File Deleted : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk

***** [ Scheduled Tasks ] *****

Task Deleted : DTReg

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\iLivid.torrent
Key Deleted : HKLM\SOFTWARE\Classes\iLivid.torrent
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKCU\Software\APNDTX
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17054


-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3991 octets] - [14/04/2014 18:23:39]
AdwCleaner[R1].txt - [882 octets] - [14/04/2014 19:49:43]
AdwCleaner[R2].txt - [2318 octets] - [25/08/2014 21:17:19]
AdwCleaner[S0].txt - [3832 octets] - [14/04/2014 18:24:57]
AdwCleaner[S1].txt - [942 octets] - [14/04/2014 19:50:16]
AdwCleaner[S2].txt - [2147 octets] - [25/08/2014 21:19:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2207 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-08-26 14:23:49
Microsoft Windows 8 Pro
System drive C: has 207 GB (43%) free of 487 GB
Total RAM: 6102 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:23:50, on 26. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17054)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MSStp] C:\WINDOWS\system32\msstp.vbe
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe /REMINDER
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.ukairmm.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star International - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Splashtop Software Updater Service (SSUService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10271 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
dashost.exe {58dc7f28-b1aa-4806-841dba6e6605f302}
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
-h
/QuitInfo:0000000000000504;0000000000000508;
/loadhooks /Parent:0000000000000478
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"SRFeature.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4656.0.1637298196\1454107978" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16,43 --gpu-vendor-id=0x10de --gpu-device-id=0x0fc6 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2063 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group6 pct:10f stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/NewSuggestType_A5_Stable_R2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_59/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="4656.6.186473897\859343321" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4656.7.1334852110\27563141" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702

"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe $(Arg0)
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Steam\steam.exe" "steam://rungameid/440"
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Program Files (x86)\Steam\config\htmlcache" -cookiepath "C:\Program Files (x86)\Steam\config\cookies" -steampid 5660 --blacklist-accelerated-compositing --process-per-tab
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3014937657-3758588925-1461075283-10008_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3014937657-3758588925-1461075283-10008 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 556 560 568 65536 564
taskeng.exe {6C446D37-C3AB-40DD-B651-03450347F601}
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\NOTEPAD.EXE" C:\rsit\log.txt
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5696 CREDAT:267521 /prefetch:2
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5696 CREDAT:3609946 /prefetch:2
"C:\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OE1668AB\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-12-14 441968]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2014-08-14 1937600]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"MSStp"=C:\WINDOWS\system32\msstp.vbe []
"Live Update"=C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe [2014-07-01 579024]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-08-01 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SplashtopRemoteService]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\WINDOWS\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\WINDOWS\SysWOW64\tsc2_codec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 3 months======

2014-08-25 21:17:44 ----A---- C:\WINDOWS\SYSWOW64\sqlite3.dll
2014-08-25 19:59:21 ----D---- C:\rsit
2014-08-25 18:47:26 ----D---- C:\Program Files\iPod
2014-08-25 18:47:25 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-25 18:47:25 ----D---- C:\Program Files\iTunes
2014-08-25 18:47:25 ----D---- C:\Program Files (x86)\iTunes
2014-08-25 18:45:44 ----SHD---- C:\Config.Msi
2014-08-25 18:08:24 ----D---- C:\Program Files\CCleaner
2014-08-16 14:10:59 ----D---- C:\ProgramData\InstallShield
2014-08-16 14:10:45 ----D---- C:\Program Files (x86)\THQ
2014-08-14 17:41:16 ----D---- C:\ProgramData\PopCap Games
2014-08-14 17:33:06 ----D---- C:\ProgramData\PogoDGC
2014-08-13 16:46:48 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-08-13 16:43:14 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-08-13 16:43:14 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\win32k.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\cdd.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-08-13 15:24:31 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-08-13 15:24:28 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-08-13 15:24:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-08-13 15:24:24 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\jscript.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 15:24:18 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-08-13 15:24:18 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 15:24:10 ----A---- C:\WINDOWS\system32\twinui.dll
2014-08-13 15:24:08 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-08-13 15:24:06 ----A---- C:\WINDOWS\system32\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\consent.exe
2014-08-13 15:24:02 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-08-13 15:24:01 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-08-05 10:11:51 ----D---- C:\ProgramData\Pinnacle
2014-08-05 10:11:43 ----D---- C:\Program Files (x86)\Pinnacle
2014-07-26 17:26:16 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-07-21 18:08:16 ----AH---- C:\WINDOWS\system32\drivers\Hamdrv.sys
2014-07-18 18:39:41 ----D---- C:\Users\David\AppData\Roaming\.minecraft
2014-07-15 13:14:47 ----D---- C:\Program Files (x86)\Play
2014-07-10 10:29:08 ----HD---- C:\WINDOWS\msdownld.tmp
2014-07-09 21:49:05 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-09 21:36:51 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-09 09:50:33 ----D---- C:\ProgramData\Splashtop
2014-07-09 09:50:16 ----D---- C:\Program Files (x86)\Splashtop
2014-07-09 08:50:53 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-09 08:50:53 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-09 08:50:49 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-09 08:50:49 ----A---- C:\WINDOWS\system32\aepic.dll
2014-07-09 08:50:42 ----A---- C:\WINDOWS\system32\InkEd.dll
2014-07-09 08:50:38 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-07-09 08:50:38 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-09 08:50:37 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-07-09 08:50:37 ----A---- C:\WINDOWS\system32\lsm.dll
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\localspl.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-07-09 08:50:02 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-09 08:49:45 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-09 08:49:45 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-05 12:09:55 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-05 12:09:54 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-05 12:09:54 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-07-05 12:09:52 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-05 12:09:51 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-07-05 12:09:27 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-07-02 19:56:26 ----D---- C:\Users\David\AppData\Roaming\.technic
2014-06-24 15:38:50 ----A---- C:\WINDOWS\system32\drivers\sthid.sys
2014-06-24 15:38:50 ----A---- C:\WINDOWS\system32\drivers\hidkmdf.sys
2014-06-17 20:56:04 ----D---- C:\temp
2014-06-15 13:02:43 ----A---- C:\WINDOWS\acpimof.dll
2014-06-15 13:02:37 ----D---- C:\Program Files (x86)\MSI
2014-06-15 12:32:43 ----D---- C:\Users\David\AppData\Roaming\TechSmith
2014-06-15 12:30:44 ----D---- C:\ProgramData\regid.1995-08.com.techsmith
2014-06-15 12:30:23 ----D---- C:\ProgramData\TechSmith
2014-06-15 12:30:23 ----D---- C:\Program Files (x86)\TechSmith
2014-06-15 12:21:44 ----D---- C:\Fraps
2014-06-12 13:51:38 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-06-12 13:51:38 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 13:51:36 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-06-12 13:51:36 ----A---- C:\WINDOWS\system32\wusa.exe
2014-06-12 13:51:36 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-06-12 13:50:37 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-06-12 13:50:36 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-06-12 13:50:36 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-06-07 19:23:40 ----D---- C:\Users\David\AppData\Roaming\ftblauncher
2014-06-06 14:27:29 ----D---- C:\Program Files (x86)\Minecraft NODUS 1.7.2 By Stano

======List of files/folders modified in the last 3 months======

2014-08-26 14:23:50 ----D---- C:\Program Files\trend micro
2014-08-26 14:23:41 ----D---- C:\WINDOWS\Prefetch
2014-08-26 14:22:42 ----D---- C:\WINDOWS\temp
2014-08-26 14:00:51 ----D---- C:\Program Files (x86)\Steam
2014-08-26 13:39:37 ----D---- C:\Users\David\AppData\Roaming\Skype
2014-08-26 13:02:00 ----D---- C:\WINDOWS\system32\sru
2014-08-26 12:18:18 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-26 08:41:29 ----D---- C:\ProgramData\NVIDIA
2014-08-25 21:32:05 ----SHD---- C:\System Volume Information
2014-08-25 21:19:56 ----D---- C:\AdwCleaner
2014-08-25 21:19:48 ----RD---- C:\Program Files (x86)
2014-08-25 21:17:44 ----D---- C:\WINDOWS\SysWOW64
2014-08-25 18:48:16 ----SHD---- C:\WINDOWS\Installer
2014-08-25 18:48:09 ----RD---- C:\WINDOWS\System32
2014-08-25 18:47:26 ----RD---- C:\Program Files
2014-08-25 18:47:25 ----D---- C:\ProgramData
2014-08-25 18:32:03 ----D---- C:\WINDOWS\SoftwareDistribution
2014-08-25 18:31:38 ----D---- C:\Windows
2014-08-25 18:31:36 ----D---- C:\WINDOWS\system32\Drivers
2014-08-25 18:31:36 ----D---- C:\WINDOWS\PLA
2014-08-25 18:29:40 ----D---- C:\WINDOWS\Inf
2014-08-25 18:14:27 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-25 18:11:00 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-08-25 18:10:39 ----D---- C:\WINDOWS\Panther
2014-08-25 18:10:26 ----D---- C:\WINDOWS\Logs
2014-08-25 18:10:26 ----D---- C:\WINDOWS\debug
2014-08-25 18:10:25 ----D---- C:\WINDOWS\Minidump
2014-08-25 18:08:26 ----D---- C:\WINDOWS\system32\Tasks
2014-08-21 20:21:51 ----D---- C:\Users\David\AppData\Roaming\Seznam.cz
2014-08-21 20:21:20 ----D---- C:\Program Files (x86)\Seznam.cz
2014-08-21 10:31:25 ----D---- C:\WINDOWS\system32\config
2014-08-17 13:14:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-16 14:13:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-16 14:10:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2014-08-16 13:54:55 ----D---- C:\Program Files (x86)\Common Files
2014-08-16 13:38:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-14 14:13:46 ----D---- C:\WINDOWS\rescache
2014-08-14 14:04:05 ----D---- C:\WINDOWS\WinSxS
2014-08-14 12:51:07 ----RSD---- C:\WINDOWS\assembly
2014-08-14 11:07:12 ----D---- C:\WINDOWS\system32\catroot2
2014-08-14 08:29:55 ----D---- C:\WINDOWS\system32\catroot
2014-08-14 08:28:13 ----D---- C:\WINDOWS\AUInstallAgent
2014-08-14 08:28:01 ----HD---- C:\Program Files\WindowsApps
2014-08-13 21:44:24 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-08-13 21:44:24 ----D---- C:\WINDOWS\system32\cs-CZ
2014-08-13 21:44:22 ----D---- C:\Program Files\Internet Explorer
2014-08-13 21:44:06 ----RD---- C:\WINDOWS\ToastData
2014-08-13 21:44:00 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-13 17:00:41 ----D---- C:\WINDOWS\CbsTemp
2014-08-13 16:58:55 ----D---- C:\WINDOWS\system32\MRT
2014-08-13 16:56:36 ----A---- C:\WINDOWS\system32\MRT.exe
2014-08-13 16:46:38 ----D---- C:\ProgramData\Microsoft Help
2014-08-06 15:56:58 ----D---- C:\ProgramData\Skype
2014-08-02 02:15:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-27 08:42:12 ----D---- C:\WINDOWS\Tasks
2014-07-26 17:24:47 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-26 17:24:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-10 16:37:21 ----D---- C:\Users\David\AppData\Roaming\Apple Computer
2014-07-10 10:30:12 ----D---- C:\WINDOWS\SYSWOW64\directx
2014-07-09 21:36:47 ----D---- C:\Program Files\Windows Journal
2014-07-09 21:36:46 ----D---- C:\WINDOWS\WinStore
2014-07-08 17:22:31 ----D---- C:\Games
2014-06-15 12:40:32 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-06-10 15:19:53 ----SD---- C:\ProgramData\Microsoft
2014-05-30 21:05:20 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 dtsoftbus01;@oem6.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-11-04 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2014-07-21 46136]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;Ovladač miniportu NDIS pro řadič Qualcomm Atheros AR813x/AR815x PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2012-06-02 100864]
R3 MEIx64;@oem2.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-17 62784]
R3 NVHDA;@oem8.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-07-10 11242784]
R3 sthid;@oem11.inf,%splashtop.SvcDesc%;Splashtop Virtual Hid; C:\WINDOWS\System32\drivers\sthid.sys [2014-06-24 21216]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
S3 NTIOLib_1_0_4;NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [2010-10-22 14136]
S3 USBAAPL64;@oem4.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2012-07-26 57344]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdFs;WUDFWpdFs; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdMtp;WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2014-03-27 83952]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-07-10 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 SplashtopRemoteService;Splashtop® Remote Service; C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe [2014-06-24 790880]
R2 SSUService;Splashtop Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [2013-10-09 609056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-07-10 413472]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-08-01 641352]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-14 833728]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-22 194032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\WINDOWS\system32\msstp.vbe
C:\WINDOWS\tasks\AutoKMS.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\AutoKMS\AutoKMS.exe

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"MSStp"=-

:commands
[Purity]
[Emptytemp]
[Emptytemp]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-08-27 15:43:13
Microsoft Windows 8 Pro
System drive C: has 208 GB (43%) free of 487 GB
Total RAM: 6102 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:43:17, on 27. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17054)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\David.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe /REMINDER
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.ukairmm.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star International - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Splashtop® Remote Service (SplashtopRemoteService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Splashtop Software Updater Service (SSUService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9764 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {99B3498A-FB2E-4271-8B4C-5EB4C625DEBB}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
dashost.exe {7af6ccce-ff22-43b2-bf332e1e7d90d778}
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
"C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe"
"C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\WINDOWS\system32\wbem\wmiprvse.exe
taskhostex.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
-h
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
/QuitInfo:000000000000080C;0000000000000810;
/loadhooks /Parent:0000000000000d64
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 556 560 568 65536 564
"C:\WINDOWS\notepad.exe" C:\_OTM\MovedFiles\08272014_153834.log
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"SRFeature.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3152 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3152 CREDAT:3741052 /prefetch:2

"C:\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q7PDYQ9R\RSITx64.exe"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-12-14 172144]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-12-14 399984]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-12-14 441968]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2014-08-14 1937600]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"Live Update"=C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe [2014-07-01 579024]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-08-01 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-12-14 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SplashtopRemoteService]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"msacm.l3codecp"=l3codecp.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\WINDOWS\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\WINDOWS\SysWOW64\tsc2_codec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 3 months======

2014-08-27 15:38:34 ----D---- C:\_OTM
2014-08-25 21:17:44 ----A---- C:\WINDOWS\SYSWOW64\sqlite3.dll
2014-08-25 19:59:21 ----D---- C:\rsit
2014-08-25 18:47:26 ----D---- C:\Program Files\iPod
2014-08-25 18:47:25 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-25 18:47:25 ----D---- C:\Program Files\iTunes
2014-08-25 18:47:25 ----D---- C:\Program Files (x86)\iTunes
2014-08-25 18:45:44 ----SHD---- C:\Config.Msi
2014-08-25 18:08:24 ----D---- C:\Program Files\CCleaner
2014-08-16 14:10:59 ----D---- C:\ProgramData\InstallShield
2014-08-16 14:10:45 ----D---- C:\Program Files (x86)\THQ
2014-08-14 17:41:16 ----D---- C:\ProgramData\PopCap Games
2014-08-14 17:33:06 ----D---- C:\ProgramData\PogoDGC
2014-08-13 16:46:48 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-08-13 16:43:14 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-08-13 16:43:14 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\win32k.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-08-13 15:24:44 ----A---- C:\WINDOWS\system32\cdd.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-08-13 15:24:43 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-08-13 15:24:31 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-08-13 15:24:28 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-08-13 15:24:26 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-08-13 15:24:24 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-08-13 15:24:23 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\wininet.dll
2014-08-13 15:24:22 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\jscript.dll
2014-08-13 15:24:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-08-13 15:24:20 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\msrating.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-08-13 15:24:19 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 15:24:18 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-08-13 15:24:18 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 15:24:10 ----A---- C:\WINDOWS\system32\twinui.dll
2014-08-13 15:24:08 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\msi.dll
2014-08-13 15:24:07 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-08-13 15:24:06 ----A---- C:\WINDOWS\system32\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-08-13 15:24:05 ----A---- C:\WINDOWS\system32\consent.exe
2014-08-13 15:24:02 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-08-13 15:24:01 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2014-08-13 15:23:57 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-08-05 10:11:51 ----D---- C:\ProgramData\Pinnacle
2014-08-05 10:11:43 ----D---- C:\Program Files (x86)\Pinnacle
2014-07-26 17:26:16 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-07-21 18:08:16 ----AH---- C:\WINDOWS\system32\drivers\Hamdrv.sys
2014-07-18 18:39:41 ----D---- C:\Users\David\AppData\Roaming\.minecraft
2014-07-15 13:14:47 ----D---- C:\Program Files (x86)\Play
2014-07-09 21:49:05 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-09 21:36:51 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-09 09:50:33 ----D---- C:\ProgramData\Splashtop
2014-07-09 09:50:16 ----D---- C:\Program Files (x86)\Splashtop
2014-07-09 08:50:53 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-09 08:50:53 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-09 08:50:49 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-09 08:50:49 ----A---- C:\WINDOWS\system32\aepic.dll
2014-07-09 08:50:42 ----A---- C:\WINDOWS\system32\InkEd.dll
2014-07-09 08:50:38 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-07-09 08:50:38 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-09 08:50:37 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-07-09 08:50:37 ----A---- C:\WINDOWS\system32\lsm.dll
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-07-09 08:50:31 ----A---- C:\WINDOWS\system32\localspl.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-07-09 08:50:30 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 08:50:30 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-07-09 08:50:02 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-09 08:49:45 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-09 08:49:45 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-05 12:09:55 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-05 12:09:54 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-05 12:09:54 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-07-05 12:09:52 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-05 12:09:51 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-05 12:09:50 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-07-05 12:09:27 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-07-05 12:09:27 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-07-02 19:56:26 ----D---- C:\Users\David\AppData\Roaming\.technic
2014-06-24 15:38:50 ----A---- C:\WINDOWS\system32\drivers\sthid.sys
2014-06-24 15:38:50 ----A---- C:\WINDOWS\system32\drivers\hidkmdf.sys
2014-06-17 20:56:04 ----D---- C:\temp
2014-06-15 13:02:43 ----A---- C:\WINDOWS\acpimof.dll
2014-06-15 13:02:37 ----D---- C:\Program Files (x86)\MSI
2014-06-15 12:32:43 ----D---- C:\Users\David\AppData\Roaming\TechSmith
2014-06-15 12:30:44 ----D---- C:\ProgramData\regid.1995-08.com.techsmith
2014-06-15 12:30:23 ----D---- C:\ProgramData\TechSmith
2014-06-15 12:30:23 ----D---- C:\Program Files (x86)\TechSmith
2014-06-15 12:21:44 ----D---- C:\Fraps
2014-06-12 13:51:38 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-06-12 13:51:38 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 13:51:36 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-06-12 13:51:36 ----A---- C:\WINDOWS\system32\wusa.exe
2014-06-12 13:51:36 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-06-12 13:50:37 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-06-12 13:50:36 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-06-12 13:50:36 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-06-07 19:23:40 ----D---- C:\Users\David\AppData\Roaming\ftblauncher
2014-06-06 14:27:29 ----D---- C:\Program Files (x86)\Minecraft NODUS 1.7.2 By Stano

======List of files/folders modified in the last 3 months======

2014-08-27 15:43:16 ----D---- C:\Program Files\trend micro
2014-08-27 15:42:43 ----D---- C:\WINDOWS\system32\catroot2
2014-08-27 15:41:36 ----D---- C:\WINDOWS\temp
2014-08-27 15:41:05 ----D---- C:\ProgramData\NVIDIA
2014-08-27 15:39:24 ----D---- C:\Windows
2014-08-27 15:38:34 ----D---- C:\WINDOWS\Tasks
2014-08-27 15:38:24 ----D---- C:\WINDOWS\Prefetch
2014-08-27 15:07:51 ----D---- C:\WINDOWS\system32\sru
2014-08-27 13:37:40 ----D---- C:\Users\David\AppData\Roaming\Skype
2014-08-27 13:17:37 ----D---- C:\Program Files (x86)\Steam
2014-08-27 13:10:09 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-26 20:10:47 ----HD---- C:\Program Files\WindowsApps
2014-08-26 20:10:47 ----D---- C:\WINDOWS\AUInstallAgent
2014-08-25 21:32:05 ----SHD---- C:\System Volume Information
2014-08-25 21:19:56 ----D---- C:\AdwCleaner
2014-08-25 21:19:48 ----RD---- C:\Program Files (x86)
2014-08-25 21:17:44 ----D---- C:\WINDOWS\SysWOW64
2014-08-25 18:48:16 ----SHD---- C:\WINDOWS\Installer
2014-08-25 18:48:09 ----RD---- C:\WINDOWS\System32
2014-08-25 18:47:26 ----RD---- C:\Program Files
2014-08-25 18:47:25 ----D---- C:\ProgramData
2014-08-25 18:32:03 ----D---- C:\WINDOWS\SoftwareDistribution
2014-08-25 18:31:36 ----D---- C:\WINDOWS\system32\Drivers
2014-08-25 18:31:36 ----D---- C:\WINDOWS\PLA
2014-08-25 18:29:40 ----D---- C:\WINDOWS\Inf
2014-08-25 18:14:27 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-25 18:11:00 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-08-25 18:10:39 ----D---- C:\WINDOWS\Panther
2014-08-25 18:10:26 ----D---- C:\WINDOWS\Logs
2014-08-25 18:10:26 ----D---- C:\WINDOWS\debug
2014-08-25 18:10:25 ----D---- C:\WINDOWS\Minidump
2014-08-25 18:08:26 ----D---- C:\WINDOWS\system32\Tasks
2014-08-21 20:21:51 ----D---- C:\Users\David\AppData\Roaming\Seznam.cz
2014-08-21 20:21:20 ----D---- C:\Program Files (x86)\Seznam.cz
2014-08-21 10:31:25 ----D---- C:\WINDOWS\system32\config
2014-08-17 13:14:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-16 14:13:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-16 14:10:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2014-08-16 13:54:55 ----D---- C:\Program Files (x86)\Common Files
2014-08-16 13:38:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-14 14:13:46 ----D---- C:\WINDOWS\rescache
2014-08-14 14:04:05 ----D---- C:\WINDOWS\WinSxS
2014-08-14 12:51:07 ----RSD---- C:\WINDOWS\assembly
2014-08-14 08:29:55 ----D---- C:\WINDOWS\system32\catroot
2014-08-13 21:44:24 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-08-13 21:44:24 ----D---- C:\WINDOWS\system32\cs-CZ
2014-08-13 21:44:22 ----D---- C:\Program Files\Internet Explorer
2014-08-13 21:44:06 ----RD---- C:\WINDOWS\ToastData
2014-08-13 21:44:00 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-13 17:00:41 ----D---- C:\WINDOWS\CbsTemp
2014-08-13 16:58:55 ----D---- C:\WINDOWS\system32\MRT
2014-08-13 16:56:36 ----A---- C:\WINDOWS\system32\MRT.exe
2014-08-13 16:46:38 ----D---- C:\ProgramData\Microsoft Help
2014-08-06 15:56:58 ----D---- C:\ProgramData\Skype
2014-08-02 02:15:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-26 17:24:47 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-26 17:24:42 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-10 16:37:21 ----D---- C:\Users\David\AppData\Roaming\Apple Computer
2014-07-10 10:30:12 ----D---- C:\WINDOWS\SYSWOW64\directx
2014-07-09 21:36:47 ----D---- C:\Program Files\Windows Journal
2014-07-09 21:36:46 ----D---- C:\WINDOWS\WinStore
2014-07-08 17:22:31 ----D---- C:\Games
2014-06-15 12:40:32 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-06-10 15:19:53 ----SD---- C:\ProgramData\Microsoft
2014-05-30 21:05:20 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 dtsoftbus01;@oem6.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2013-11-04 283064]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 Hamachi;LogMeIn Hamachi Virtual Miniport); C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [2014-07-21 46136]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;Ovladač miniportu NDIS pro řadič Qualcomm Atheros AR813x/AR815x PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2012-06-02 100864]
R3 MEIx64;@oem2.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-17 62784]
R3 NVHDA;@oem8.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2013-02-25 194848]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-07-10 11242784]
R3 sthid;@oem11.inf,%splashtop.SvcDesc%;Splashtop Virtual Hid; C:\WINDOWS\System32\drivers\sthid.sys [2014-06-24 21216]
S3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
S3 NTIOLib_1_0_4;NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [2010-10-22 14136]
S3 USBAAPL64;@oem4.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2012-07-26 57344]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdFs;WUDFWpdFs; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 WUDFWpdMtp;WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2014-03-27 83952]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-07-10 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 SplashtopRemoteService;Splashtop® Remote Service; C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe [2014-06-24 790880]
R2 SSUService;Splashtop Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe [2013-10-09 609056]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-07-10 413472]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-08-01 641352]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-22 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-22 194032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-14 833728]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\David.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

O15 - Trusted Zone: http://www.ukairmm.com

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.