Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosím o kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
tomaskolik
Návštěvník
Návštěvník
Příspěvky: 128
Registrován: 15 lis 2008 11:38

prosím o kontrolu

#1 Příspěvek od tomaskolik »

Ahoj, prosím o kontrolu, pc je zpomalené, zamrzá OS, padají programy..

Díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by Katerina at 2015-03-14 23:14:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 14 GB (35%) free of 40 GB
Total RAM: 2038 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:16:52, on 14.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\qttask.exe
C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\The KMPlayer\KMPlayer.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera_crashreporter.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Windows\system32\DllHost.exe
C:\Windows\explorer.exe
C:\Users\Katerina\Desktop\RSIT.exe
C:\Program Files\trend micro\Katerina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TrackPointSrv] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Windows\system32\qttask.exe" -atboottime
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{26866656-A152-4BDD-A2C1-7795F2F50DFA}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{5FFD65D7-D7BC-4585-AED8-394F5F61C7DB}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F71D24D-65BD-42B5-B2C5-4AC72D3CC0F4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{A928253E-F76D-4C9A-AE4C-34C1D52CB999}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{B77323AE-7C9A-4F3A-98F7-5E0A2D9F53E5}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{E6ED8549-9D96-4C87-9582-AC99AD536766}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Lenovo. - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 7426 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-01 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"TrackPointSrv"=C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [2009-11-24 93032]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-06 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-06 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-06 150552]
"PSQLLauncher"=C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [2013-03-05 56104]
"QuickTime Task"=C:\Windows\system32\qttask.exe [2014-02-23 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"cz.seznam.software.szndesktop"=C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Katerina\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\ThinkPad\BLUETO~1\BTTray.exe [2011-01-24 804128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-06 217600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2013-03-05 101160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.avrn"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"=C:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"=C:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"vidc.cscd"=C:\PROGRA~1\ACEMEG~1\SystemS\camcodec.dll
"vidc.cvid"=C:\PROGRA~1\ACEMEG~1\SystemS\iccvid.dll
"msacm.trspch"=C:\PROGRA~1\ACEMEG~1\SystemS\tssoft32.acm
"vidc.em2v"=C:\PROGRA~1\ACEMEG~1\SystemS\etxcodec.dll
"vidc.mkvc"=C:\PROGRA~1\ACEMEG~1\SystemS\kmvidc32.dll
"vidc.hfyu"=C:\PROGRA~1\ACEMEG~1\SystemS\huffyuv.dll
"msacm.lameacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lameacm.acm
"msacm.lhacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lhacm.acm
"msacm.l3acm"=C:\PROGRA~1\ACEMEG~1\SystemS\l3codecp.acm
"vidc.sjpg"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.dmb2"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.gepj"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.qpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"vidc.q1.0"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"msacm.sl_anet"=C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.tscc"=C:\PROGRA~1\ACEMEG~1\SystemS\tsccvid.dll
"vidc.vifp"=C:\PROGRA~1\ACEMEG~1\SystemS\vfcodec.dll
"vidc.wrpr"=C:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.wnv1"=C:\PROGRA~1\ACEMEG~1\SystemS\wnvplay1.dll
"vidc.advs"=C:\PROGRA~1\ACEMEG~1\SystemS\Adaptec\Dvc.dll
"vidc.aflc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.afli"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.aasc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv1.dll
"vidc.asv2"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.asvx"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr1.dll
"vidc.vcr2"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr2.dll
"vidc.yv12"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"=C:\PROGRA~1\ACEMEG~1\SystemS\Aware\icmw_32.dll
"vidc.bt20"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"vidc.y41p"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"msacm.pcdv"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\pcdv.acm
"vidc.cdvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREPN~1.DLL
"msacm.CoreFLAC_ACM"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREFL~1.ACM
"vidc.davc"=C:\PROGRA~1\ACEMEG~1\SystemS\dicas\davcvfw.dll
"vidc.div3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div5"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.mpg3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.div6"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.ap41"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divx4.dll
"vidc.divx"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"msacm.divxa32"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divxa32.acm
"vidc.frwd"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwt"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwa"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwt.dll
"vidc.frwu"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwu.dll
"vidc.glzw"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GLZW.dll
"vidc.gpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GPEG.dll
"vidc.i263"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\i263_32.drv
"vidc.iv30"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv31"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv32"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv33"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv34"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv35"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv36"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv37"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv38"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv39"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv40"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv41"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv42"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv43"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv44"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv45"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv46"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv47"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv48"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv49"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv50"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir50_32.dll
"vidc.iyuv"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.ir21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"vidc.rt21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"msacm.imc"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IMC32.ACM
"vidc.lead"=C:\PROGRA~1\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-14 23:14:04 ----D---- C:\Program Files\trend micro
2015-03-14 23:14:03 ----D---- C:\rsit
2015-03-11 18:38:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:38:19 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:38:18 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:38:18 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:38:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:38:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:38:11 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:38:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:38:09 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:38:08 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:38:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:38:05 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:38:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:38:03 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:38:01 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:24:40 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:24:38 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:24:37 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:24:34 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 16:24:34 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:24:33 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\ci.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:24:30 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:24:30 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:24:28 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:24:26 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:24:25 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:24:24 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:24:24 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:24:22 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:24:19 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:19:19 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 16:14:12 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 16:14:07 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 16:13:51 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 16:08:48 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 16:08:38 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 16:08:37 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 16:08:37 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:08:33 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 16:08:12 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 16:08:11 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 16:08:06 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-09 02:11:18 ----D---- C:\Program Files\Machinarium
2015-02-22 18:08:59 ----D---- C:\Users\Katerina\AppData\Roaming\Virtual Mechanics
2015-02-22 18:08:59 ----D---- C:\ProgramData\Virtual Mechanics
2015-02-16 13:57:49 ----D---- C:\Program Files\Virtual Mechanics

======List of files/folders modified in the last 1 month======

2015-03-14 23:14:51 ----D---- C:\Windows\Temp
2015-03-14 23:14:18 ----D---- C:\Windows\Prefetch
2015-03-14 23:14:04 ----D---- C:\Program Files
2015-03-14 08:01:11 ----D---- C:\Windows\system32\config
2015-03-14 04:56:08 ----SHD---- C:\System Volume Information
2015-03-14 04:51:43 ----D---- C:\Windows\rescache
2015-03-12 06:46:30 ----D---- C:\Windows\winsxs
2015-03-12 06:43:42 ----D---- C:\Windows\system32\catroot2
2015-03-12 06:43:07 ----D---- C:\Windows\System32
2015-03-12 06:43:06 ----D---- C:\Windows\system32\en-US
2015-03-12 06:43:05 ----D---- C:\Program Files\Internet Explorer
2015-03-12 06:43:03 ----D---- C:\Windows\system32\drivers
2015-03-12 06:43:03 ----D---- C:\Windows\system32\cs-CZ
2015-03-12 06:42:59 ----D---- C:\Windows\system32\Dism
2015-03-12 06:42:59 ----D---- C:\Program Files\Windows Media Player
2015-03-12 06:42:57 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 06:42:57 ----D---- C:\Windows\system32\Boot
2015-03-11 22:03:53 ----D---- C:\Windows\inf
2015-03-11 22:03:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-11 12:32:47 ----D---- C:\Program Files\Opera
2015-03-11 12:32:46 ----D---- C:\Windows\system32\Tasks
2015-02-24 03:23:36 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-22 18:08:59 ----HD---- C:\ProgramData
2015-02-16 13:59:21 ----SHD---- C:\Windows\Installer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-01 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-01 192352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-01 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-01 414520]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-06 243128]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-01 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-01 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-01 71944]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 96768]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2011-05-30 11976]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 e1express;Intel(R) PRO/1000 – ovladač PCI Express síťového připojení; C:\Windows\system32\DRIVERS\e1e6032.sys [2009-07-13 211456]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2014-02-27 45880]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-08-06 4786688]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-19 30720]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 35288]
R3 Tp4Track;PS/2 TrackPoint Driver; C:\Windows\system32\DRIVERS\tp4track.sys [2009-11-24 23152]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 29696]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 86056]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-01-15 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 18472]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 PCASp60;PCASp60 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp60.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-11-11 98560]
S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-11-11 100224]
S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-11-11 14848]
S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-11-11 123776]
S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-11-11 100224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-01 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe [2011-01-24 628000]
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2014-02-27 56664]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2013-05-24 116216]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2013-05-22 125504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2013-05-22 127072]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 102912]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2013-08-22 32568]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-07 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu

#2 Příspěvek od Rudy »

Zdravím!
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tomaskolik
Návštěvník
Návštěvník
Příspěvky: 128
Registrován: 15 lis 2008 11:38

Re: prosím o kontrolu

#3 Příspěvek od tomaskolik »

# AdwCleaner v4.112 - Logfile created 15/03/2015 at 13:25:11
# Updated 09/03/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x86)
# Username : Katerina - KATERINA-PC
# Running from : C:\Users\Katerina\Desktop\adwcleaner_4.112.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Katerina\AppData\Roaming\pdfforge

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Google Chrome v41.0.2272.89


-\\ Opera v28.0.1750.40


*************************

AdwCleaner[R0].txt - [846 bytes] - [15/03/2015 13:22:20]
AdwCleaner[S0].txt - [776 bytes] - [15/03/2015 13:25:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [834 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tomaskolik
Návštěvník
Návštěvník
Příspěvky: 128
Registrován: 15 lis 2008 11:38

Re: prosím o kontrolu

#5 Příspěvek od tomaskolik »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Katerina at 2015-03-15 17:19:06
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 15 GB (36%) free of 40 GB
Total RAM: 2038 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:19:38, on 15.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\qttask.exe
C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera_crashreporter.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\The KMPlayer\KMPlayer.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Katerina\Desktop\RSIT.exe
C:\Program Files\trend micro\Katerina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TrackPointSrv] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Windows\system32\qttask.exe" -atboottime
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{26866656-A152-4BDD-A2C1-7795F2F50DFA}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{5FFD65D7-D7BC-4585-AED8-394F5F61C7DB}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F71D24D-65BD-42B5-B2C5-4AC72D3CC0F4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{A928253E-F76D-4C9A-AE4C-34C1D52CB999}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{B77323AE-7C9A-4F3A-98F7-5E0A2D9F53E5}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{E6ED8549-9D96-4C87-9582-AC99AD536766}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Lenovo. - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 7418 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-01 457712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"TrackPointSrv"=C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [2009-11-24 93032]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-06 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-06 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-06 150552]
"PSQLLauncher"=C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [2013-03-05 56104]
"QuickTime Task"=C:\Windows\system32\qttask.exe [2014-02-23 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"cz.seznam.software.szndesktop"=C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-02-19 5503768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Katerina\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\ThinkPad\BLUETO~1\BTTray.exe [2011-01-24 804128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-06 217600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2013-03-05 101160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.avrn"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"=C:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"=C:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"vidc.cscd"=C:\PROGRA~1\ACEMEG~1\SystemS\camcodec.dll
"vidc.cvid"=C:\PROGRA~1\ACEMEG~1\SystemS\iccvid.dll
"msacm.trspch"=C:\PROGRA~1\ACEMEG~1\SystemS\tssoft32.acm
"vidc.em2v"=C:\PROGRA~1\ACEMEG~1\SystemS\etxcodec.dll
"vidc.mkvc"=C:\PROGRA~1\ACEMEG~1\SystemS\kmvidc32.dll
"vidc.hfyu"=C:\PROGRA~1\ACEMEG~1\SystemS\huffyuv.dll
"msacm.lameacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lameacm.acm
"msacm.lhacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lhacm.acm
"msacm.l3acm"=C:\PROGRA~1\ACEMEG~1\SystemS\l3codecp.acm
"vidc.sjpg"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.dmb2"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.gepj"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.qpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"vidc.q1.0"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"msacm.sl_anet"=C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.tscc"=C:\PROGRA~1\ACEMEG~1\SystemS\tsccvid.dll
"vidc.vifp"=C:\PROGRA~1\ACEMEG~1\SystemS\vfcodec.dll
"vidc.wrpr"=C:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.wnv1"=C:\PROGRA~1\ACEMEG~1\SystemS\wnvplay1.dll
"vidc.advs"=C:\PROGRA~1\ACEMEG~1\SystemS\Adaptec\Dvc.dll
"vidc.aflc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.afli"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.aasc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv1.dll
"vidc.asv2"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.asvx"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr1.dll
"vidc.vcr2"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr2.dll
"vidc.yv12"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"=C:\PROGRA~1\ACEMEG~1\SystemS\Aware\icmw_32.dll
"vidc.bt20"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"vidc.y41p"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"msacm.pcdv"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\pcdv.acm
"vidc.cdvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREPN~1.DLL
"msacm.CoreFLAC_ACM"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREFL~1.ACM
"vidc.davc"=C:\PROGRA~1\ACEMEG~1\SystemS\dicas\davcvfw.dll
"vidc.div3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div5"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.mpg3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.div6"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.ap41"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divx4.dll
"vidc.divx"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"msacm.divxa32"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divxa32.acm
"vidc.frwd"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwt"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwa"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwt.dll
"vidc.frwu"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwu.dll
"vidc.glzw"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GLZW.dll
"vidc.gpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GPEG.dll
"vidc.i263"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\i263_32.drv
"vidc.iv30"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv31"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv32"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv33"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv34"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv35"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv36"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv37"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv38"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv39"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv40"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv41"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv42"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv43"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv44"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv45"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv46"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv47"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv48"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv49"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv50"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir50_32.dll
"vidc.iyuv"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.ir21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"vidc.rt21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"msacm.imc"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IMC32.ACM
"vidc.lead"=C:\PROGRA~1\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-15 13:22:17 ----D---- C:\AdwCleaner
2015-03-14 23:14:04 ----D---- C:\Program Files\trend micro
2015-03-14 23:14:03 ----D---- C:\rsit
2015-03-11 18:38:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:38:19 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:38:18 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:38:18 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:38:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:38:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:38:11 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:38:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:38:09 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:38:08 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:38:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:38:05 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:38:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:38:03 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:38:01 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:24:40 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:24:38 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:24:37 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:24:34 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 16:24:34 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:24:33 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\ci.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:24:30 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:24:30 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:24:28 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:24:26 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:24:25 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:24:24 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:24:24 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:24:22 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:24:19 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:19:19 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 16:14:12 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 16:14:07 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 16:13:51 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 16:08:48 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 16:08:38 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 16:08:37 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 16:08:37 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:08:33 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 16:08:12 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 16:08:11 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 16:08:06 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-09 02:11:18 ----D---- C:\Program Files\Machinarium
2015-02-22 18:08:59 ----D---- C:\Users\Katerina\AppData\Roaming\Virtual Mechanics
2015-02-22 18:08:59 ----D---- C:\ProgramData\Virtual Mechanics
2015-02-16 13:57:49 ----D---- C:\Program Files\Virtual Mechanics

======List of files/folders modified in the last 1 month======

2015-03-15 17:19:09 ----D---- C:\Windows\Temp
2015-03-15 14:43:15 ----D---- C:\Windows\Prefetch
2015-03-15 13:43:49 ----D---- C:\Windows\system32\config
2015-03-15 13:28:25 ----D---- C:\Windows\inf
2015-03-15 13:28:11 ----D---- C:\Windows
2015-03-15 08:22:17 ----D---- C:\Users\Katerina\AppData\Roaming\Media Player Classic
2015-03-15 08:22:16 ----D---- C:\Program Files\PDFCreator
2015-03-15 08:21:57 ----D---- C:\Windows\ModemLogs
2015-03-15 08:21:56 ----D---- C:\Windows\Minidump
2015-03-15 08:15:31 ----SHD---- C:\Windows\Installer
2015-03-15 08:15:28 ----HD---- C:\Program Files\InstallShield Installation Information
2015-03-15 08:15:25 ----D---- C:\Program Files
2015-03-15 08:15:22 ----D---- C:\Windows\system32\drivers
2015-03-15 08:15:11 ----SHD---- C:\System Volume Information
2015-03-15 08:15:08 ----D---- C:\Windows\system32\Tasks
2015-03-15 08:13:18 ----D---- C:\Program Files\CCleaner
2015-03-14 04:51:43 ----D---- C:\Windows\rescache
2015-03-12 06:46:30 ----D---- C:\Windows\winsxs
2015-03-12 06:43:42 ----D---- C:\Windows\system32\catroot2
2015-03-12 06:43:07 ----D---- C:\Windows\System32
2015-03-12 06:43:06 ----D---- C:\Windows\system32\en-US
2015-03-12 06:43:05 ----D---- C:\Program Files\Internet Explorer
2015-03-12 06:43:03 ----D---- C:\Windows\system32\cs-CZ
2015-03-12 06:42:59 ----D---- C:\Windows\system32\Dism
2015-03-12 06:42:59 ----D---- C:\Program Files\Windows Media Player
2015-03-12 06:42:57 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 06:42:57 ----D---- C:\Windows\system32\Boot
2015-03-11 22:03:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-11 12:32:47 ----D---- C:\Program Files\Opera
2015-02-24 03:23:36 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-22 18:08:59 ----HD---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-01 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-01 192352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-01 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-01 414520]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-06 243128]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-01 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-01 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-01 71944]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 96768]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2011-05-30 11976]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 e1express;Intel(R) PRO/1000 – ovladač PCI Express síťového připojení; C:\Windows\system32\DRIVERS\e1e6032.sys [2009-07-13 211456]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2014-02-27 45880]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-08-06 4786688]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-19 30720]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 35288]
R3 Tp4Track;PS/2 TrackPoint Driver; C:\Windows\system32\DRIVERS\tp4track.sys [2009-11-24 23152]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 29696]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 86056]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-01-15 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 18472]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 PCASp60;PCASp60 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp60.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-11-11 98560]
S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-11-11 100224]
S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-11-11 14848]
S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-11-11 123776]
S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-11-11 100224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-01 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe [2011-01-24 628000]
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2014-02-27 56664]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2013-05-24 116216]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2013-05-22 125504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2013-05-22 127072]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 102912]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2013-08-22 32568]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-07 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
tomaskolik
Návštěvník
Návštěvník
Příspěvky: 128
Registrován: 15 lis 2008 11:38

Re: prosím o kontrolu

#7 Příspěvek od tomaskolik »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Katerina at 2015-03-15 17:39:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 14 GB (36%) free of 40 GB
Total RAM: 2038 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:15, on 15.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\notepad.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\qttask.exe
C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera_crashreporter.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Program Files\Opera\28.0.1750.40\opera.exe
C:\Users\Katerina\Desktop\RSIT.exe
C:\Program Files\trend micro\Katerina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [TrackPointSrv] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Windows\system32\qttask.exe" -atboottime
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{26866656-A152-4BDD-A2C1-7795F2F50DFA}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{5FFD65D7-D7BC-4585-AED8-394F5F61C7DB}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F71D24D-65BD-42B5-B2C5-4AC72D3CC0F4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{A928253E-F76D-4C9A-AE4C-34C1D52CB999}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{B77323AE-7C9A-4F3A-98F7-5E0A2D9F53E5}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{E6ED8549-9D96-4C87-9582-AC99AD536766}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{117965C1-FBA4-4373-9869-7FD5E7D2DEB4}: NameServer = 78.136.128.4 78.136.128.12
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lenovo PM Service (IBMPMSVC) - Lenovo. - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 7318 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-01 457712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"TrackPointSrv"=C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [2009-11-24 93032]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-06 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-06 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-06 150552]
"PSQLLauncher"=C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [2013-03-05 56104]
"QuickTime Task"=C:\Windows\system32\qttask.exe [2014-02-23 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"cz.seznam.software.szndesktop"=C:\Users\Katerina\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-02-19 5503768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Katerina\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\ThinkPad\BLUETO~1\BTTray.exe [2011-01-24 804128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-06 217600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2013-03-05 101160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.avrn"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"=C:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"=C:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"=C:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"vidc.cscd"=C:\PROGRA~1\ACEMEG~1\SystemS\camcodec.dll
"vidc.cvid"=C:\PROGRA~1\ACEMEG~1\SystemS\iccvid.dll
"msacm.trspch"=C:\PROGRA~1\ACEMEG~1\SystemS\tssoft32.acm
"vidc.em2v"=C:\PROGRA~1\ACEMEG~1\SystemS\etxcodec.dll
"vidc.mkvc"=C:\PROGRA~1\ACEMEG~1\SystemS\kmvidc32.dll
"vidc.hfyu"=C:\PROGRA~1\ACEMEG~1\SystemS\huffyuv.dll
"msacm.lameacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lameacm.acm
"msacm.lhacm"=C:\PROGRA~1\ACEMEG~1\SystemS\lhacm.acm
"msacm.l3acm"=C:\PROGRA~1\ACEMEG~1\SystemS\l3codecp.acm
"vidc.sjpg"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.dmb2"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.gepj"=C:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.qpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"vidc.q1.0"=C:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"msacm.sl_anet"=C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.tscc"=C:\PROGRA~1\ACEMEG~1\SystemS\tsccvid.dll
"vidc.vifp"=C:\PROGRA~1\ACEMEG~1\SystemS\vfcodec.dll
"vidc.wrpr"=C:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.wnv1"=C:\PROGRA~1\ACEMEG~1\SystemS\wnvplay1.dll
"vidc.advs"=C:\PROGRA~1\ACEMEG~1\SystemS\Adaptec\Dvc.dll
"vidc.aflc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.afli"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.aasc"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"=C:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv1.dll
"vidc.asv2"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.asvx"=C:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr1.dll
"vidc.vcr2"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr2.dll
"vidc.yv12"=C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"=C:\PROGRA~1\ACEMEG~1\SystemS\Aware\icmw_32.dll
"vidc.bt20"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"vidc.y41p"=C:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"msacm.pcdv"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\pcdv.acm
"vidc.cdvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"=C:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREPN~1.DLL
"msacm.CoreFLAC_ACM"=C:\PROGRA~1\ACEMEG~1\SystemS\Core\COREFL~1.ACM
"vidc.davc"=C:\PROGRA~1\ACEMEG~1\SystemS\dicas\davcvfw.dll
"vidc.div3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div5"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.mpg3"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.div6"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.ap41"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divx4.dll
"vidc.divx"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"msacm.divxa32"=C:\PROGRA~1\ACEMEG~1\SystemS\DivX\divxa32.acm
"vidc.frwd"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwt"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwa"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwt.dll
"vidc.frwu"=C:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwu.dll
"vidc.glzw"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GLZW.dll
"vidc.gpeg"=C:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GPEG.dll
"vidc.i263"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\i263_32.drv
"vidc.iv30"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv31"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv32"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv33"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv34"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv35"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv36"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv37"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv38"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv39"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv40"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv41"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv42"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv43"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv44"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv45"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv46"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv47"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv48"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv49"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv50"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir50_32.dll
"vidc.iyuv"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.ir21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"vidc.rt21"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"msacm.imc"=C:\PROGRA~1\ACEMEG~1\SystemS\Intel\IMC32.ACM
"vidc.lead"=C:\PROGRA~1\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-15 17:34:18 ----D---- C:\_OTM
2015-03-15 13:22:17 ----D---- C:\AdwCleaner
2015-03-14 23:14:04 ----D---- C:\Program Files\trend micro
2015-03-14 23:14:03 ----D---- C:\rsit
2015-03-11 18:38:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 18:38:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 18:38:19 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 18:38:19 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 18:38:18 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 18:38:18 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 18:38:17 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 18:38:17 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 18:38:15 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 18:38:13 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 18:38:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 18:38:11 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 18:38:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 18:38:09 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 18:38:08 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 18:38:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 18:38:05 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 18:38:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 18:38:03 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 18:38:01 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 18:37:59 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:24:42 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:24:41 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:24:40 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:24:38 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:24:38 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:24:37 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:24:36 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:24:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:24:34 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 16:24:34 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:24:34 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:24:33 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:24:33 ----A---- C:\Windows\system32\ci.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:24:32 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:24:32 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:24:31 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:24:30 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:24:30 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:24:29 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:24:28 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:24:28 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:24:28 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:24:27 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:24:27 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:24:26 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:24:26 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:24:25 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:24:24 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:24:24 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:24:23 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:24:22 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:24:19 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:19:19 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 16:19:14 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 16:14:12 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 16:14:07 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 16:13:51 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 16:08:48 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 16:08:39 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 16:08:38 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 16:08:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 16:08:37 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 16:08:37 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 16:08:37 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 16:08:36 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 16:08:35 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 16:08:34 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:08:33 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 16:08:12 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 16:08:11 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 16:08:10 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 16:08:06 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-09 02:11:18 ----D---- C:\Program Files\Machinarium
2015-02-22 18:08:59 ----D---- C:\Users\Katerina\AppData\Roaming\Virtual Mechanics
2015-02-22 18:08:59 ----D---- C:\ProgramData\Virtual Mechanics
2015-02-16 13:57:49 ----D---- C:\Program Files\Virtual Mechanics

======List of files/folders modified in the last 1 month======

2015-03-15 17:37:55 ----D---- C:\Windows\Prefetch
2015-03-15 17:37:51 ----D---- C:\Windows\Temp
2015-03-15 17:34:19 ----D---- C:\Windows\Tasks
2015-03-15 13:43:49 ----D---- C:\Windows\system32\config
2015-03-15 13:28:25 ----D---- C:\Windows\inf
2015-03-15 13:28:11 ----D---- C:\Windows
2015-03-15 08:22:17 ----D---- C:\Users\Katerina\AppData\Roaming\Media Player Classic
2015-03-15 08:22:16 ----D---- C:\Program Files\PDFCreator
2015-03-15 08:21:57 ----D---- C:\Windows\ModemLogs
2015-03-15 08:21:56 ----D---- C:\Windows\Minidump
2015-03-15 08:15:31 ----SHD---- C:\Windows\Installer
2015-03-15 08:15:28 ----HD---- C:\Program Files\InstallShield Installation Information
2015-03-15 08:15:25 ----D---- C:\Program Files
2015-03-15 08:15:22 ----D---- C:\Windows\system32\drivers
2015-03-15 08:15:11 ----SHD---- C:\System Volume Information
2015-03-15 08:15:08 ----D---- C:\Windows\system32\Tasks
2015-03-15 08:13:18 ----D---- C:\Program Files\CCleaner
2015-03-14 04:51:43 ----D---- C:\Windows\rescache
2015-03-12 06:46:30 ----D---- C:\Windows\winsxs
2015-03-12 06:43:42 ----D---- C:\Windows\system32\catroot2
2015-03-12 06:43:07 ----D---- C:\Windows\System32
2015-03-12 06:43:06 ----D---- C:\Windows\system32\en-US
2015-03-12 06:43:05 ----D---- C:\Program Files\Internet Explorer
2015-03-12 06:43:03 ----D---- C:\Windows\system32\cs-CZ
2015-03-12 06:42:59 ----D---- C:\Windows\system32\Dism
2015-03-12 06:42:59 ----D---- C:\Program Files\Windows Media Player
2015-03-12 06:42:57 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 06:42:57 ----D---- C:\Windows\system32\Boot
2015-03-11 22:03:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-11 12:32:47 ----D---- C:\Program Files\Opera
2015-02-24 03:23:36 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-22 18:08:59 ----HD---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-01 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-01 192352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-01 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-01 414520]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-03-06 243128]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-01 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-01 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-01 71944]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 96768]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2011-05-30 11976]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 e1express;Intel(R) PRO/1000 – ovladač PCI Express síťového připojení; C:\Windows\system32\DRIVERS\e1e6032.sys [2009-07-13 211456]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2014-02-27 45880]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-08-06 4786688]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-19 30720]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 35288]
R3 Tp4Track;PS/2 TrackPoint Driver; C:\Windows\system32\DRIVERS\tp4track.sys [2009-11-24 23152]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 29696]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 86056]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-01-15 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 18472]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 PCASp60;PCASp60 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp60.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\Windows\system32\DRIVERS\vwmfbus.sys [2009-11-11 98560]
S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfdiag.sys [2009-11-11 100224]
S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\Windows\system32\DRIVERS\vwmfmdfl.sys [2009-11-11 14848]
S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\Windows\system32\DRIVERS\vwmfmdm.sys [2009-11-11 123776]
S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\Windows\system32\DRIVERS\vwmfserd.sys [2009-11-11 100224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-01 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe [2011-01-24 628000]
R2 IBMPMSVC;Lenovo PM Service; C:\Windows\system32\ibmpmsvc.exe [2014-02-27 56664]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2013-05-24 116216]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2013-05-22 125504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2013-05-22 127072]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-10 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 102912]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2013-08-22 32568]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-07 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119426
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu

#8 Příspěvek od Rudy »

Log je již OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“