
Logfile of random's system information tool 1.10 (written by random/random)
Run by Michal at 2014-11-04 22:14:36
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 128 GB (9%) free of 1431 GB
Total RAM: 4094 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:20, on 4.11.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Michal\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Michal.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll
O4 - HKLM\..\RunOnce: [GBTUpd] C:\Program Files (x86)\Gigabyte\GBTUpd\PreRun.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [test] C:\Windows\bat_starter.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [f.lux] "C:\Users\Michal\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Bitdefender Desktop Parental Control (BdDesktopParental) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Tor Win32 Service (tor) - Unknown owner - C:\Program Files (x86)\Tor\tor.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Bitdefender Virus Shield (vsserv) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10938 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe" /service
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 4bc5e31f-2b08-476f-9696-e5bceded7a09 1
"C:\Program Files (x86)\Tor\tor.exe" --nt-service "-ControlPort" "9051"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe"
"C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe" /service
\??\C:\Windows\system32\conhost.exe "1591641347-125719222118629355661445934718-1545918281-18400737491060338237-929660544
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2680
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-394767909-127762053-4160263321423994188-547587747-1110463476-1805063269270462261
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe" /TUStart /pid:2556
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ea862d5d-9bbf-41f2-b030-4ca6dee812a6 -SystemEventPortName:HostProcess-c22dad1f-a4b9-4159-ba2d-dd082400ab16 -IoCancelEventPortName:HostProcess-f4e04458-3350-429b-bd8a-d03df3de2bdc -NonStateChangingEventPortName:HostProcess-0f1aedaa-3372-4775-b7a8-89316391d780 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3f872f23-6158-4ecc-9a44-275cc30d308b -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe"
"C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\Michal\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
"C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe"
"C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5884 CREDAT:267521 /prefetch:2
"C:\Users\Michal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A61DU1JZ\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskeng.exe {19425133-39B0-4287-9F37-836434BD4EFB}
"C:\Windows\system32\SearchFilterHost.exe" 0 544 548 556 65536 552
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-1.job - C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe /rawdata=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
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-11.job - C:\Program Files (x86)\iWebar\086aa29e-fe25-4df1-9422-85ceb14b5931-11.exe /rawdata=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
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-2.job - C:\Program Files (x86)\iWebar\086aa29e-fe25-4df1-9422-85ceb14b5931-2.exe /rawdata=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
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-4.job - C:\Program Files (x86)\iWebar\086aa29e-fe25-4df1-9422-85ceb14b5931-4.exe /rawdata=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
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-5.job - C:\Program Files (x86)\iWebar\086aa29e-fe25-4df1-9422-85ceb14b5931-5.exe /rawdata=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
C:\Windows\tasks\086aa29e-fe25-4df1-9422-85ceb14b5931-5_user.job - C:\Program Files (x86)\iWebar\086aa29e-fe25-4df1-9422-85ceb14b5931-5.exe /rawdata=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
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5izadkp3.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "bdc.cz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\5izadkp3.default\extensions\
admin@proxy-listen.de
ROUAILDE73397174@UXGZI17268980.com
warnerroberts@hotmail.com
{ea614400-e918-4741-9a97-7a972ff7c30b}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2014-09-23 425248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2014-09-23 384512]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-07 11858536]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2460488]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-09-17 2799784]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"Bdagent"=C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [2014-10-02 1621072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"test"=C:\Windows\bat_starter.exe []
"uTorrent"=C:\Users\Michal\AppData\Roaming\uTorrent\uTorrent.exe [2014-10-27 1385808]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22058592]
"f.lux"=C:\Users\Michal\AppData\Local\FluxSoftware\Flux\flux.exe [2013-10-23 1017224]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-10-23 6501656]
"Bitdefender Wallet Agent"=C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [2014-09-30 780080]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GBTUpd"=C:\Program Files (x86)\Gigabyte\GBTUpd\PreRun.exe [2008-04-03 297480]
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Michal\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-11-04 22:14:36 ----D---- C:\rsit
2014-11-04 22:14:36 ----D---- C:\Program Files\trend micro
2014-11-04 21:53:30 ----A---- C:\bdlog.txt
2014-11-04 21:37:50 ----A---- C:\Windows\system32\drivers\bdvedisk.sys
2014-11-04 21:37:49 ----A---- C:\Windows\system32\bdsandboxuiskin32.dll
2014-11-04 21:20:07 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2014-11-04 21:19:47 ----D---- C:\ProgramData\BDLogging
2014-11-04 21:19:35 ----A---- C:\Windows\SYSWOW64\bdsandboxuiskin32.dll
2014-11-04 21:19:35 ----A---- C:\Windows\system32\drivers\bdsandbox.sys
2014-11-04 21:19:35 ----A---- C:\Windows\system32\drivers\BdfNdisf6.sys
2014-11-04 21:19:35 ----A---- C:\Windows\capicom.dll
2014-11-04 21:19:06 ----A---- C:\Windows\system32\drivers\avchv.sys
2014-11-04 21:19:06 ----A---- C:\Windows\system32\drivers\avckf.sys
2014-11-04 21:19:04 ----A---- C:\Windows\system32\drivers\avc3.sys
2014-11-04 21:18:42 ----D---- C:\Users\Michal\AppData\Roaming\Bitdefender
2014-11-04 21:15:15 ----D---- C:\ProgramData\Bitdefender
2014-11-04 21:15:15 ----A---- C:\Windows\system32\BDSandBoxUISkin.dll
2014-11-04 21:15:15 ----A---- C:\Windows\system32\BDSandBoxUH.dll
2014-11-04 21:15:14 ----A---- C:\Windows\system32\drivers\gzflt.sys
2014-11-04 21:15:13 ----D---- C:\Program Files\Bitdefender
2014-11-04 21:15:13 ----A---- C:\Windows\system32\drivers\trufos.sys
2014-11-04 19:02:24 ----D---- C:\Program Files\Common Files\Bitdefender
2014-11-04 18:57:33 ----D---- C:\Users\Michal\AppData\Roaming\QuickScan
2014-11-04 18:51:35 ----A---- C:\Windows\ntbtlog.txt
2014-11-04 18:43:06 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-30 20:37:21 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-10-30 13:27:53 ----D---- C:\Users\Michal\AppData\Roaming\ESET
2014-10-30 13:26:11 ----D---- C:\ProgramData\ESET
2014-10-30 13:26:11 ----D---- C:\Program Files\ESET
2014-10-25 23:42:39 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-10-25 23:41:19 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-10-25 23:41:19 ----D---- C:\Program Files\iTunes
2014-10-25 23:41:19 ----D---- C:\Program Files\iPod
2014-10-25 23:41:19 ----D---- C:\Program Files (x86)\iTunes
2014-10-25 23:37:27 ----D---- C:\Program Files (x86)\Apple Software Update
2014-10-25 23:37:06 ----D---- C:\Program Files\Common Files\Apple
2014-10-25 23:36:56 ----D---- C:\Program Files\Bonjour
2014-10-25 23:36:56 ----D---- C:\Program Files (x86)\Bonjour
2014-10-25 22:49:45 ----D---- C:\Users\Michal\AppData\Roaming\Apple Computer
2014-10-25 22:48:51 ----DC---- C:\Windows\system32\DRVSTORE
2014-10-25 22:46:43 ----D---- C:\ProgramData\Apple Computer
2014-10-25 22:19:56 ----D---- C:\ProgramData\Apple
2014-10-25 02:08:36 ----D---- C:\Program Files (x86)\globalUpdate
2014-10-25 02:06:43 ----AD---- C:\ProgramData\TEMP
2014-10-25 01:16:43 ----D---- C:\Games
2014-10-15 14:28:20 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2014-10-15 14:24:02 ----A---- C:\Windows\system32\win32k.sys
2014-10-15 14:23:54 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-15 14:23:54 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-15 14:23:54 ----A---- C:\Windows\system32\mscorier.dll
2014-10-15 14:23:54 ----A---- C:\Windows\system32\dfshim.dll
2014-10-15 14:23:53 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-15 14:23:53 ----A---- C:\Windows\system32\mscories.dll
2014-10-15 14:23:00 ----A---- C:\Windows\system32\blackbox.dll
2014-10-15 14:22:59 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-10-15 14:22:59 ----A---- C:\Windows\system32\drmv2clt.dll
2014-10-15 14:22:57 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2014-10-15 14:22:54 ----A---- C:\Windows\system32\wmp.dll
2014-10-15 14:22:51 ----A---- C:\Windows\system32\mf.dll
2014-10-15 14:22:50 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-10-15 14:22:49 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-10-15 14:22:44 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-10-15 14:22:42 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-15 14:22:39 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-10-15 14:22:38 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-10-15 14:22:38 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-10-15 14:22:37 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-10-15 14:22:37 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2014-10-15 14:22:37 ----A---- C:\Windows\system32\ci.dll
2014-10-15 14:22:34 ----A---- C:\Windows\system32\AudioEng.dll
2014-10-15 14:22:33 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-10-15 14:22:33 ----A---- C:\Windows\system32\winresume.exe
2014-10-15 14:22:33 ----A---- C:\Windows\system32\winload.exe
2014-10-15 14:22:33 ----A---- C:\Windows\system32\quartz.dll
2014-10-15 14:22:32 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-10-15 14:22:32 ----A---- C:\Windows\system32\wintrust.dll
2014-10-15 14:22:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-10-15 14:22:32 ----A---- C:\Windows\system32\evr.dll
2014-10-15 14:22:32 ----A---- C:\Windows\system32\cryptsvc.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-10-15 14:22:31 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\srcore.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\pcasvc.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\mfplat.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\EncDump.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\cryptui.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\cryptsp.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\crypt32.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\audiosrv.dll
2014-10-15 14:22:31 ----A---- C:\Windows\system32\AudioSes.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-10-15 14:22:30 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-15 14:22:30 ----A---- C:\Windows\system32\srclient.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\spwmp.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\rstrui.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\rrinstaller.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\msscp.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\msnetobj.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\mfps.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\mfpmp.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\mferror.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\dxmasf.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\drivers\appid.sys
2014-10-15 14:22:30 ----A---- C:\Windows\system32\audiodg.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\appidsvc.dll
2014-10-15 14:22:30 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 14:22:30 ----A---- C:\Windows\system32\appidapi.dll
2014-10-15 14:22:18 ----A---- C:\Windows\system32\generaltel.dll
2014-10-15 14:22:17 ----A---- C:\Windows\system32\aepdu.dll
2014-10-15 14:22:15 ----A---- C:\Windows\system32\aeinv.dll
2014-10-15 14:22:10 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-15 14:22:10 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-15 14:22:10 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-15 14:22:10 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-15 14:22:09 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-15 14:22:09 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 14:22:09 ----A---- C:\Windows\system32\iernonce.dll
2014-10-15 14:22:09 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-15 14:22:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-15 14:22:08 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-15 14:22:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-15 14:22:08 ----A---- C:\Windows\system32\urlmon.dll
2014-10-15 14:22:08 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-15 14:22:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-15 14:22:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-15 14:22:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-15 14:22:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-15 14:22:07 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-15 14:22:07 ----A---- C:\Windows\system32\iesetup.dll
2014-10-15 14:22:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 14:22:07 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-15 14:22:07 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-15 14:22:06 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-15 14:22:06 ----A---- C:\Windows\system32\iertutil.dll
2014-10-15 14:22:05 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-15 14:22:05 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-15 14:22:05 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-15 14:22:04 ----A---- C:\Windows\system32\ieui.dll
2014-10-15 14:22:04 ----A---- C:\Windows\system32\ieframe.dll
2014-10-15 14:22:04 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-15 14:22:03 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-15 14:22:03 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-15 14:22:03 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-15 14:22:03 ----A---- C:\Windows\system32\jscript9.dll
2014-10-15 14:22:03 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-15 14:22:02 ----A---- C:\Windows\system32\wininet.dll
2014-10-15 14:22:02 ----A---- C:\Windows\system32\vbscript.dll
2014-10-15 14:22:02 ----A---- C:\Windows\system32\msrating.dll
2014-10-15 14:22:02 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-15 14:22:02 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-15 14:22:01 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 14:22:01 ----A---- C:\Windows\system32\mshtml.dll
2014-10-15 14:21:13 ----A---- C:\Windows\system32\msi.dll
2014-10-15 14:21:11 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-15 14:20:50 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-15 14:20:44 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-15 14:20:44 ----A---- C:\Windows\system32\rastls.dll
2014-10-15 14:20:09 ----A---- C:\Windows\system32\termsrv.dll
2014-10-15 14:20:07 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-15 14:20:07 ----A---- C:\Windows\system32\winsta.dll
2014-10-15 14:20:07 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-15 14:20:06 ----A---- C:\Windows\system32\winlogon.exe
2014-10-15 14:20:06 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-15 14:20:04 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-15 14:20:04 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-15 14:20:04 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-15 14:20:04 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-15 14:20:04 ----A---- C:\Windows\system32\credssp.dll
2014-10-15 14:19:33 ----A---- C:\Windows\system32\mstscax.dll
2014-10-15 14:19:32 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-15 14:19:30 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-15 14:19:30 ----A---- C:\Windows\system32\packager.dll
2014-10-15 14:15:13 ----D---- C:\ProgramData\McAfee
2014-10-13 19:54:45 ----D---- C:\Program Files\CCleaner
2014-10-13 19:35:47 ----D---- C:\Program Files (x86)\ffdshow
2014-10-13 19:35:47 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\epfwwfp.sys
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\epfw.sys
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\ehdrv.sys
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\edevmon.sys
2014-10-10 08:59:12 ----A---- C:\Windows\system32\drivers\eamonm.sys
2014-10-08 23:29:23 ----D---- C:\Users\Michal\AppData\Roaming\.minecraft
======List of files/folders modified in the last 1 month======
2014-11-04 22:25:16 ----D---- C:\Windows\Temp
2014-11-04 22:24:30 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2014-11-04 22:18:12 ----D---- C:\Windows\system32\drivers\etc
2014-11-04 22:14:36 ----RD---- C:\Program Files
2014-11-04 22:13:11 ----D---- C:\Windows\System32
2014-11-04 22:06:12 ----D---- C:\Windows\system32\config
2014-11-04 22:06:00 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2014-11-04 22:05:49 ----D---- C:\Users\Michal\AppData\Roaming\Dropbox
2014-11-04 22:03:00 ----D---- C:\ProgramData\NVIDIA
2014-11-04 21:40:51 ----D---- C:\Windows
2014-11-04 21:37:52 ----D---- C:\Windows\system32\drivers
2014-11-04 21:21:16 ----HD---- C:\ProgramData
2014-11-04 21:20:29 ----D---- C:\Windows\inf
2014-11-04 21:20:27 ----D---- C:\Windows\system32\DriverStore
2014-11-04 21:02:24 ----RD---- C:\Program Files (x86)
2014-11-04 19:05:41 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-04 19:03:37 ----A---- C:\Windows\wininit.ini
2014-11-04 19:03:35 ----SD---- C:\ProgramData\Microsoft
2014-11-04 19:02:24 ----D---- C:\Program Files\Common Files
2014-11-04 19:02:06 ----D---- C:\Program Files (x86)\Common Files
2014-11-04 18:57:33 ----D---- C:\Windows\Downloaded Program Files
2014-11-04 18:10:01 ----SHD---- C:\Windows\Installer
2014-11-04 18:10:01 ----SHD---- C:\Config.Msi
2014-11-04 18:08:41 ----SHD---- C:\System Volume Information
2014-11-04 18:08:02 ----D---- C:\Users\Michal\AppData\Roaming\Seznam.cz
2014-11-04 18:07:50 ----D---- C:\Windows\Prefetch
2014-11-04 18:06:58 ----D---- C:\Windows\system32\appmgmt
2014-10-31 00:59:21 ----A---- C:\Windows\explorer_1.exe
2014-10-30 13:33:16 ----D---- C:\Users\Michal\AppData\Roaming\newnext.me
2014-10-30 01:27:43 ----D---- C:\Windows\SoftwareDistribution
2014-10-29 03:23:05 ----D---- C:\Windows\Tasks
2014-10-29 03:23:05 ----D---- C:\Windows\system32\Tasks
2014-10-28 06:34:58 ----N---- C:\Windows\system32\MpSigStub.exe
2014-10-27 10:46:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-27 02:28:27 ----D---- C:\Windows\system32\catroot
2014-10-25 02:25:34 ----D---- C:\Windows\Logs
2014-10-25 02:19:58 ----HD---- C:\Windows\system32\GroupPolicy
2014-10-25 02:19:58 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-10-25 02:00:10 ----D---- C:\Program Files\Nikon
2014-10-24 23:31:11 ----D---- C:\Porno
2014-10-24 23:14:09 ----D---- C:\Program Files (x86)\Assassins Creed IV Black Flag
2014-10-24 23:08:47 ----D---- C:\Windows\debug
2014-10-24 22:47:01 ----D---- C:\Users\Michal\AppData\Roaming\GRETECH
2014-10-24 22:47:01 ----D---- C:\ProgramData\GRETECH
2014-10-24 22:47:00 ----D---- C:\Program Files (x86)\GRETECH
2014-10-24 22:45:52 ----D---- C:\Users\Michal\AppData\Roaming\DVDVideoSoft
2014-10-24 22:45:50 ----RSD---- C:\Windows\assembly
2014-10-22 20:32:27 ----D---- C:\ProgramData\Skype
2014-10-22 20:32:18 ----RD---- C:\Program Files (x86)\Skype
2014-10-16 18:29:15 ----D---- C:\Windows\rescache
2014-10-16 17:54:44 ----D---- C:\Windows\Microsoft.NET
2014-10-16 11:21:31 ----D---- C:\Windows\winsxs
2014-10-16 11:21:29 ----D---- C:\Windows\system32\catroot2
2014-10-16 11:21:22 ----SHD---- C:\Boot
2014-10-15 23:02:12 ----D---- C:\Windows\SYSWOW64\en-US
2014-10-15 23:02:12 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-15 23:02:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-10-15 23:02:12 ----D---- C:\Program Files\Windows Media Player
2014-10-15 23:02:12 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-15 23:02:11 ----D---- C:\Windows\system32\en-US
2014-10-15 23:02:11 ----D---- C:\Windows\system32\Dism
2014-10-15 23:02:11 ----D---- C:\Windows\system32\cs-CZ
2014-10-15 23:02:09 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-15 23:02:09 ----D---- C:\Windows\system32\Boot
2014-10-15 19:01:54 ----SD---- C:\Windows\system32\CompatTel
2014-10-15 19:01:52 ----D---- C:\Program Files\Internet Explorer
2014-10-15 19:01:48 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-15 14:28:06 ----D---- C:\Windows\system32\MRT
2014-10-15 14:24:56 ----A---- C:\Windows\system32\MRT.exe
2014-10-15 14:14:58 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-10-13 19:56:32 ----D---- C:\Users\Michal\AppData\Roaming\DAEMON Tools Lite
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 avc3;avc3; C:\Windows\system32\DRIVERS\avc3.sys [2014-05-16 1260120]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 gzflt;gzflt; C:\Windows\system32\DRIVERS\gzflt.sys [2013-08-23 150256]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-03-29 564824]
R0 trufos;trufos; C:\Windows\system32\DRIVERS\trufos.sys [2014-07-02 419616]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-11 21104]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver; \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2013-11-13 93600]
R1 bdfwfpf;bdfwfpf; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2012-10-29 107080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2009-07-20 27136]
R3 avckf;avckf; C:\Windows\system32\DRIVERS\avckf.sys [2014-05-16 647752]
R3 avchv;avchv Function Driver; C:\Windows\system32\DRIVERS\avchv.sys [2012-11-02 261056]
R3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-11-04 25640]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-07 2890984]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 19272]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-10-07 11856]
S3 bdfwfpf_pc;bdfwfpf_pc; \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [2013-07-02 121928]
S3 BDSandBox;BDSandBox; \??\C:\Windows\system32\drivers\bdsandbox.sys [2013-11-04 82824]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2013-03-29 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2013-06-01 30528]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan60.sys [2007-12-03 24064]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2009-09-21 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2009-09-21 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2009-09-21 161280]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2009-12-21 51712]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VLAN;Realtek Virtual Miniport Driver for VLAN (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVLAN60.sys [2007-12-03 24064]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1148744]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19439944]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R2 tor;Tor Win32 Service; C:\Program Files (x86)\Tor\tor.exe [2013-08-24 3233806]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-12-08 2028864]
R2 UPDATESRV;Bitdefender Desktop Update Service; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [2014-09-12 67320]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 vsserv;Bitdefender Virus Shield; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [2014-10-02 1523752]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-25 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-08 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-15 267440]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-07 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BdDesktopParental;Bitdefender Desktop Parental Control; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [2014-09-29 78144]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-10-25 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-08 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-10-28 114288]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-29 1255736]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------