Vyťažený procesor, pomalé PC
Napsal: 20 bře 2015 17:32
Zdravím vás, domáce PC je nejaké spomalené. Som tu len raz za mesiac, tak nemám kontrolu, čo sa tu inštaluje. Poprosil by som vás o kontrolu logu.
Navyše mi stále padá jedna hra a zo support fóra mi napísali toto: "Seriously, something stole the focus from the game ("WndProc::WINDOW lost focus "). Check out for the overlay software etc. Thanks."
Jediné, nad čím tu nejak pochybujem je My wifi router, nič iné ma nenapadá. Vďaka.
Logfile of random's system information tool 1.10 (written by random/random)
Run by admin at 2015-03-20 17:29:34
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 30 GB (10%) free of 305 GB
Total RAM: 16365 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:29:40, on 20. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\admin.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [My WIFI Router] "C:\Program Files (x86)\My WIFI Router\My WIFI Router.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WIFIGXENDHCPSER - Unknown owner - C:\Program Files (x86)\My WIFI Router\bmser.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8990 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\My WIFI Router\bmser.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
WLIDSvcM.exe 1748
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe"
"C:\Program Files (x86)\Steam\steam.exe" steam://run/244210
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\admin\AppData\Local\Steam\htmlcache" -steampid 1596 -buildid 1424305157 -steamid "0" --blacklist-accelerated-compositing --process-per-tab --disable-accelerated-video-decode --enable-direct-write
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 2"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2752.0.1245523787\1055278468" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x6758 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.1.1553094178\1867356676" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.3.517249253\1784689396" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.4.1733556020\1210156437" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.5.2033924333\58627320" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.7.906166660\1796219551" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.21.1936058948\2069815456" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.26.1505381194\1302164377" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.28.1975187285\253064019" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2752.33.1028271538\502667977" --ppapi-flash-args=enable_hw_video_decode=1 --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe25_ Global\UsGthrCtrlFltPipeMssGthrPipe25 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\admin\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Torntv V6.0-chromeinstaller.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exe /installcrx /agentregpath='Torntv V6.0' /extensionfilepath='C:\Program Files (x86)\Torntv V6.0\45960.crx' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=ahmilhmcinpmpohfoiccaplbhgelbnim /extensionversion=1.26.71 /extensionpublickey=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7jTNxL7h3FB/7RViD415XIgSs8u7OpVFlyS3MJgMtHVkPLpmLyt0lr1jUfjaFytjaPQSJYipB9zgxntsyN9pMFhVI3YuKm2jfCfBc0asZ2Ys4AhxagcKp/y0Ofkp8Rb4xe+gD4tDbDo436Q8GyehUWSHyrPtB4lODcQxHVZ+EzQIDAQAB /defbro=ch /allusers /allprofiles /autoupdateulr='http://update.srvstatsdata.com/ch_agent ... pdate.json' /crxinstalltype=1 /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-codedownloader.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /codedownloaddomain=http://cr.install-daddy.com /defbro=ch /allusers /autoupdateulr='http://update.srvstatsdata.com/ie_code_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-firefoxinstaller.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exe /installxpi /agentregpath='Torntv V6.0' /extensionfilepath='C:\Program Files (x86)\Torntv V6.0\45960.xpi' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=e2fd07a6-e282-4f2e-8965-85565fcb6384@b69158e6-3c3b-476c-9d98-ae5838c5b707.com /extensionversion=0.93 /prefsbranch=ae2fd07a6e2824f2e896585565fcb6384b69158e63c3b476c9d98ae5838c5b707com45960 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /45960.rdf /extensionname='Torntv V6.0' /extensiondesc='The must-have App extensions for Television fans! Watch free TV channels, live sports and more' /publishername='installdaddy' /defbro=ch /allusers /allprofiles /checkfflist /autoupdateulr='http://update.srvstatsdata.com/ff_agent ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-updater.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exe /runupdater /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http://stats.syncstatsdata.com /autoupdateulr='http://update.srvstatsdata.com/updater_ ... pdate.json' /runfrom='task' /externallog=''
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-25 551400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-25 209384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-05-07 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-05-07 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [2012-07-04 4133072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-03-14 809288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Synchronizer]
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe [2014-12-03 761064]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bloody2]
C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe Minimum []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify]
C:\Program Files (x86)\Connectify\Connectify.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify Dispatch]
C:\Program Files (x86)\Connectify\DispatchUI.exe autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify Hotspot]
C:\Program Files (x86)\Connectify\Connectify.exe autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\admin\AppData\Roaming\Seznam.cz\szninstall.exe -c []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\admin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe -AutoStart []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-03-14 809288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleDriveSync]
C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2015-02-19 26232152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch LCore]
C:\Program Files\Logitech Gaming Software\LCore.exe [2013-11-14 8292120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2010-04-12 180224]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-28 11905128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic PDF Print Dispatcher]
C:\Program Files (x86)\Investintech.com Inc\Sonic PDF Creator\3.0\itSONPrnDisp.exe [2013-05-01 319488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\admin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-12-17 1676344]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning]
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe /autoclean []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-16 190472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-06 766208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
E:\Hry\il2\Steam.exe -silent []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-05-07 256896]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-12-31 7780120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe [2015-01-22 1377872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
C:\PROGRA~2\AMDAVT~1\bin\kdbsync.exe [2013-12-06 47104]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Virtual Router Manager.lnk]
C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe /min []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"My WIFI Router"=C:\Program Files (x86)\My WIFI Router\My WIFI Router.exe [2014-05-19 1748480]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.xtor"=DxtoryCodec.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-03-20 17:29:34 ----D---- C:\rsit
2015-03-20 17:29:34 ----D---- C:\Program Files\trend micro
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 16:43:34 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 16:43:34 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:43:34 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:43:33 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 16:43:31 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 16:43:31 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:43:31 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:43:30 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 16:43:30 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 16:43:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:43:29 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:43:29 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:43:28 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 16:43:28 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 16:43:28 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:43:28 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:43:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 16:43:27 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 16:43:27 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:43:26 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 16:43:26 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 16:43:26 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 16:43:26 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:43:26 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 16:43:25 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:43:25 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:43:25 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:43:24 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:43:24 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\ci.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:43:22 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:43:22 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:43:21 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 16:43:21 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:43:21 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:43:20 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:43:18 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:43:18 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:43:17 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:43:16 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:43:15 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 16:43:15 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:43:05 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 16:43:04 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 16:43:04 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 16:42:46 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 16:42:45 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 16:42:39 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 16:42:38 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 16:42:35 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 16:42:35 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:42:28 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 16:42:28 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 16:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 16:42:27 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:42:25 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 16:42:23 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:42:23 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 16:42:21 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 16:42:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:42:19 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 16:42:19 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 16:42:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 16:42:18 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 16:42:18 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 16:42:17 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 16:42:16 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 16:42:16 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 16:42:13 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 16:42:13 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 16:42:01 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 16:42:01 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-03 21:33:08 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\wdi.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\powertracker.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\perftrack.dll
2015-02-27 19:18:13 ----D---- C:\Program Files (x86)\RealFlight7
======List of files/folders modified in the last 1 month======
2015-03-20 17:29:40 ----D---- C:\Windows\Prefetch
2015-03-20 17:29:36 ----D---- C:\Windows\Temp
2015-03-20 17:29:34 ----RD---- C:\Program Files
2015-03-20 17:24:08 ----D---- C:\Program Files (x86)\My WIFI Router
2015-03-20 17:20:38 ----D---- C:\Program Files (x86)\Steam
2015-03-20 08:20:12 ----D---- C:\Windows\system32\config
2015-03-20 08:10:27 ----SHD---- C:\System Volume Information
2015-03-20 07:19:35 ----AD---- C:\ProgramData\TEMP
2015-03-19 03:03:51 ----D---- C:\Users\admin\AppData\Roaming\uTorrent
2015-03-15 23:32:29 ----A---- C:\Windows\NeroDigital.ini
2015-03-14 19:14:50 ----SHD---- C:\Config.Msi
2015-03-14 16:51:59 ----SHD---- C:\Windows\Installer
2015-03-12 16:09:31 ----D---- C:\Windows\winsxs
2015-03-12 16:09:30 ----SHD---- C:\Boot
2015-03-12 16:05:58 ----D---- C:\Windows\SysWOW64
2015-03-12 16:05:58 ----D---- C:\Windows\System32
2015-03-12 16:05:57 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-12 16:05:57 ----D---- C:\Program Files\Windows Media Player
2015-03-12 16:05:57 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-12 16:05:56 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-12 16:05:55 ----D---- C:\Windows\system32\drivers
2015-03-12 16:05:54 ----D---- C:\Windows\system32\sk-SK
2015-03-12 16:05:54 ----D---- C:\Windows\system32\en-US
2015-03-12 16:05:54 ----D---- C:\Windows\system32\Dism
2015-03-12 16:05:51 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 16:05:51 ----D---- C:\Windows\system32\Boot
2015-03-12 16:05:48 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-12 16:05:46 ----D---- C:\Program Files\Internet Explorer
2015-03-12 16:05:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 23:22:50 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 23:06:13 ----D---- C:\Windows\system32\MRT
2015-03-11 23:06:13 ----D---- C:\Windows\debug
2015-03-11 23:06:10 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 16:41:28 ----D---- C:\Windows\system32\catroot2
2015-03-09 20:31:35 ----D---- C:\Windows\system32\LogFiles
2015-03-07 01:51:06 ----D---- C:\Windows
2015-03-04 08:00:14 ----D---- C:\Windows\tracing
2015-02-27 19:18:13 ----RD---- C:\Program Files (x86)
2015-02-27 14:41:02 ----D---- C:\Windows\system32\wbem
2015-02-27 14:39:57 ----D---- C:\Windows\Tasks
2015-02-27 14:39:57 ----D---- C:\Windows\system32\DriverStore
2015-02-27 14:39:57 ----D---- C:\Windows\system32\drivers\etc
2015-02-27 14:39:57 ----D---- C:\Windows\inf
2015-02-27 14:39:57 ----D---- C:\Users\admin\AppData\Roaming\GHISLER
2015-02-27 14:39:55 ----D---- C:\Windows\registration
2015-02-24 03:17:24 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-22 23:04:16 ----D---- C:\Users\admin\AppData\Roaming\vlc
2015-02-21 13:11:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-04-08 564792]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 cnnctfy3;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy3.sys [2014-10-11 42152]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-04-08 283200]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-07-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-29 152136]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-29 140752]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-12-06 13207552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-12-06 626176]
R3 arusb_win7x;Service For TP-LINK Wireless N Adapter; C:\Windows\system32\DRIVERS\arusb_win7x.sys [2010-02-23 769024]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-10-03 129512]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-10-03 394728]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-24 94208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-28 2905832]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-09-11 26248]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-09-11 15880]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-09-11 76552]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-10-08 31968]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2013-02-05 57840]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2013-02-13 76648]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2013-02-13 85864]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 19304]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2013-10-24 27336]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2013-10-24 73216]
S3 SIUSBXP;SIUSBXP; C:\Windows\system32\drivers\SiUSBXp.sys [2010-04-30 16384]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-09-11 41096]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-09-11 36872]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [2012-07-04 999704]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-08-20 75136]
R2 WIFIGXENDHCPSER;WIFIGXENDHCPSER; C:\Program Files (x86)\My WIFI Router\bmser.exe [2014-04-23 1656416]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-25 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2012-07-04 35720]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2012-07-04 190208]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2013-02-05 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-25 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-21 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-02 262320]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-12-06 239616]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-09-23 833728]
S4 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
-----------------EOF-----------------
Ešte AdwCleaner
# AdwCleaner v4.112 - Logfile created 20/03/2015 at 17:43:20
# Updated 09/03/2015 by Xplode
# Database : 2015-03-15.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : admin - ADMIN-PC
# Running from : C:\Users\admin\Desktop\adwcleaner_4.112.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Program Files (x86)\Gophoto.it
Folder Deleted : C:\Program Files (x86)\Smart Driver Updater
Folder Deleted : C:\Program Files (x86)\TornTV.com
Folder Deleted : C:\Users\admin\AppData\Local\Mobogenie
Folder Deleted : C:\Users\admin\AppData\Roaming\Conduit
Folder Deleted : C:\Users\admin\AppData\Roaming\OpenCandy
File Deleted : C:\Users\admin\daemonprocess.txt
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\Myfree Codec
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17689
-\\ Mozilla Firefox v
-\\ Google Chrome v41.0.2272.101
*************************
AdwCleaner[R0].txt - [3085 bytes] - [20/03/2015 17:41:56]
AdwCleaner[S0].txt - [2904 bytes] - [20/03/2015 17:43:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2963 bytes] ##########
Navyše mi stále padá jedna hra a zo support fóra mi napísali toto: "Seriously, something stole the focus from the game ("WndProc::WINDOW lost focus "). Check out for the overlay software etc. Thanks."
Jediné, nad čím tu nejak pochybujem je My wifi router, nič iné ma nenapadá. Vďaka.
Logfile of random's system information tool 1.10 (written by random/random)
Run by admin at 2015-03-20 17:29:34
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 30 GB (10%) free of 305 GB
Total RAM: 16365 MB (82% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:29:40, on 20. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\admin.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [My WIFI Router] "C:\Program Files (x86)\My WIFI Router\My WIFI Router.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WIFIGXENDHCPSER - Unknown owner - C:\Program Files (x86)\My WIFI Router\bmser.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8990 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\My WIFI Router\bmser.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
WLIDSvcM.exe 1748
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe"
"C:\Program Files (x86)\Steam\steam.exe" steam://run/244210
"C:\Program Files (x86)\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\admin\AppData\Local\Steam\htmlcache" -steampid 1596 -buildid 1424305157 -steamid "0" --blacklist-accelerated-compositing --process-per-tab --disable-accelerated-video-decode --enable-direct-write
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 2"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2752.0.1245523787\1055278468" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x6758 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.1.1553094178\1867356676" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.3.517249253\1784689396" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.4.1733556020\1210156437" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.5.2033924333\58627320" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.7.906166660\1796219551" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.21.1936058948\2069815456" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.26.1505381194\1302164377" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A6/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_55/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2752 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2752.28.1975187285\253064019" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2752.33.1028271538\502667977" --ppapi-flash-args=enable_hw_video_decode=1 --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe25_ Global\UsGthrCtrlFltPipeMssGthrPipe25 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\admin\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Torntv V6.0-chromeinstaller.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exe /installcrx /agentregpath='Torntv V6.0' /extensionfilepath='C:\Program Files (x86)\Torntv V6.0\45960.crx' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=ahmilhmcinpmpohfoiccaplbhgelbnim /extensionversion=1.26.71 /extensionpublickey=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7jTNxL7h3FB/7RViD415XIgSs8u7OpVFlyS3MJgMtHVkPLpmLyt0lr1jUfjaFytjaPQSJYipB9zgxntsyN9pMFhVI3YuKm2jfCfBc0asZ2Ys4AhxagcKp/y0Ofkp8Rb4xe+gD4tDbDo436Q8GyehUWSHyrPtB4lODcQxHVZ+EzQIDAQAB /defbro=ch /allusers /allprofiles /autoupdateulr='http://update.srvstatsdata.com/ch_agent ... pdate.json' /crxinstalltype=1 /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-codedownloader.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /codedownloaddomain=http://cr.install-daddy.com /defbro=ch /allusers /autoupdateulr='http://update.srvstatsdata.com/ie_code_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-firefoxinstaller.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exe /installxpi /agentregpath='Torntv V6.0' /extensionfilepath='C:\Program Files (x86)\Torntv V6.0\45960.xpi' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=e2fd07a6-e282-4f2e-8965-85565fcb6384@b69158e6-3c3b-476c-9d98-ae5838c5b707.com /extensionversion=0.93 /prefsbranch=ae2fd07a6e2824f2e896585565fcb6384b69158e63c3b476c9d98ae5838c5b707com45960 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /45960.rdf /extensionname='Torntv V6.0' /extensiondesc='The must-have App extensions for Television fans! Watch free TV channels, live sports and more' /publishername='installdaddy' /defbro=ch /allusers /allprofiles /checkfflist /autoupdateulr='http://update.srvstatsdata.com/ff_agent ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\Torntv V6.0-updater.job - C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exe /runupdater /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=BC252D68DF4143FA8B1B7C2C1F8C66AFIE /verifier=0ee129551135571eca01e02572cedc2f /installerversion=1_34_1_21 /installationtime=1390755608 /statsdomain=http://stats.srvstatsdata.com /errorsdomain=http://errors.srvstatsdata.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http://stats.syncstatsdata.com /autoupdateulr='http://update.srvstatsdata.com/updater_ ... pdate.json' /runfrom='task' /externallog=''
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-25 551400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-25 209384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-05-07 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-05-07 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [2012-07-04 4133072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-03-14 809288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Synchronizer]
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe [2014-12-03 761064]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bloody2]
C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe Minimum []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify]
C:\Program Files (x86)\Connectify\Connectify.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify Dispatch]
C:\Program Files (x86)\Connectify\DispatchUI.exe autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify Hotspot]
C:\Program Files (x86)\Connectify\Connectify.exe autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\admin\AppData\Roaming\Seznam.cz\szninstall.exe -c []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\admin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-01-24 3478336]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
C:\Program Files (x86)\Origin\Origin.exe -AutoStart []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-03-14 809288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleDriveSync]
C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2015-02-19 26232152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch LCore]
C:\Program Files\Logitech Gaming Software\LCore.exe [2013-11-14 8292120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2010-04-12 180224]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-28 11905128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sonic PDF Print Dispatcher]
C:\Program Files (x86)\Investintech.com Inc\Sonic PDF Creator\3.0\itSONPrnDisp.exe [2013-05-01 319488]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\admin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-12-17 1676344]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning]
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe /autoclean []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-16 190472]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-06 766208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
E:\Hry\il2\Steam.exe -silent []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-05-07 256896]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-12-31 7780120]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe [2015-01-22 1377872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
C:\PROGRA~2\AMDAVT~1\bin\kdbsync.exe [2013-12-06 47104]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Virtual Router Manager.lnk]
C:\Windows\Installer\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}\_118D1A4EFFA6998C3492EB.exe /min []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"My WIFI Router"=C:\Program Files (x86)\My WIFI Router\My WIFI Router.exe [2014-05-19 1748480]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.xtor"=DxtoryCodec.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2015-03-20 17:29:34 ----D---- C:\rsit
2015-03-20 17:29:34 ----D---- C:\Program Files\trend micro
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 16:43:43 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 16:43:43 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 16:43:34 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 16:43:34 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 16:43:34 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 16:43:33 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 16:43:31 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 16:43:31 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 16:43:31 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:43:30 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 16:43:30 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 16:43:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:43:29 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:43:29 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 16:43:28 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 16:43:28 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 16:43:28 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 16:43:28 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 16:43:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 16:43:27 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 16:43:27 ----A---- C:\Windows\system32\evr.dll
2015-03-11 16:43:26 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 16:43:26 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 16:43:26 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 16:43:26 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 16:43:26 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 16:43:25 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 16:43:25 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 16:43:25 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 16:43:25 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 16:43:24 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\winload.exe
2015-03-11 16:43:24 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 16:43:24 ----A---- C:\Windows\system32\mf.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\ci.dll
2015-03-11 16:43:23 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 16:43:22 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 16:43:22 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 16:43:22 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:43:22 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 16:43:21 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 16:43:21 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 16:43:21 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 16:43:20 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 16:43:20 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 16:43:19 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\smss.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 16:43:19 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:43:19 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 16:43:18 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 16:43:18 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 16:43:18 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 16:43:18 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 16:43:17 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 16:43:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 16:43:16 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 16:43:16 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 16:43:15 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 16:43:15 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 16:43:05 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-11 16:43:04 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-11 16:43:04 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 16:42:46 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 16:42:45 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 16:42:39 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 16:42:38 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 16:42:35 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 16:42:35 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 16:42:35 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 16:42:35 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 16:42:34 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 16:42:34 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 16:42:28 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 16:42:28 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 16:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 16:42:27 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:42:25 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 16:42:23 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 16:42:23 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:42:23 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 16:42:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 16:42:22 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 16:42:21 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 16:42:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:42:20 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 16:42:19 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 16:42:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:42:19 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 16:42:19 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 16:42:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 16:42:18 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 16:42:18 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 16:42:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 16:42:17 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 16:42:16 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 16:42:16 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 16:42:16 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 16:42:15 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:42:14 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 16:42:13 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 16:42:13 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 16:42:01 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 16:42:01 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-03 21:33:08 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\wdi.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\powertracker.dll
2015-03-03 21:33:08 ----A---- C:\Windows\system32\perftrack.dll
2015-02-27 19:18:13 ----D---- C:\Program Files (x86)\RealFlight7
======List of files/folders modified in the last 1 month======
2015-03-20 17:29:40 ----D---- C:\Windows\Prefetch
2015-03-20 17:29:36 ----D---- C:\Windows\Temp
2015-03-20 17:29:34 ----RD---- C:\Program Files
2015-03-20 17:24:08 ----D---- C:\Program Files (x86)\My WIFI Router
2015-03-20 17:20:38 ----D---- C:\Program Files (x86)\Steam
2015-03-20 08:20:12 ----D---- C:\Windows\system32\config
2015-03-20 08:10:27 ----SHD---- C:\System Volume Information
2015-03-20 07:19:35 ----AD---- C:\ProgramData\TEMP
2015-03-19 03:03:51 ----D---- C:\Users\admin\AppData\Roaming\uTorrent
2015-03-15 23:32:29 ----A---- C:\Windows\NeroDigital.ini
2015-03-14 19:14:50 ----SHD---- C:\Config.Msi
2015-03-14 16:51:59 ----SHD---- C:\Windows\Installer
2015-03-12 16:09:31 ----D---- C:\Windows\winsxs
2015-03-12 16:09:30 ----SHD---- C:\Boot
2015-03-12 16:05:58 ----D---- C:\Windows\SysWOW64
2015-03-12 16:05:58 ----D---- C:\Windows\System32
2015-03-12 16:05:57 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-12 16:05:57 ----D---- C:\Program Files\Windows Media Player
2015-03-12 16:05:57 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-12 16:05:56 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-12 16:05:55 ----D---- C:\Windows\system32\drivers
2015-03-12 16:05:54 ----D---- C:\Windows\system32\sk-SK
2015-03-12 16:05:54 ----D---- C:\Windows\system32\en-US
2015-03-12 16:05:54 ----D---- C:\Windows\system32\Dism
2015-03-12 16:05:51 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-12 16:05:51 ----D---- C:\Windows\system32\Boot
2015-03-12 16:05:48 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-12 16:05:46 ----D---- C:\Program Files\Internet Explorer
2015-03-12 16:05:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 23:22:50 ----D---- C:\ProgramData\Microsoft Help
2015-03-11 23:06:13 ----D---- C:\Windows\system32\MRT
2015-03-11 23:06:13 ----D---- C:\Windows\debug
2015-03-11 23:06:10 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 16:41:28 ----D---- C:\Windows\system32\catroot2
2015-03-09 20:31:35 ----D---- C:\Windows\system32\LogFiles
2015-03-07 01:51:06 ----D---- C:\Windows
2015-03-04 08:00:14 ----D---- C:\Windows\tracing
2015-02-27 19:18:13 ----RD---- C:\Program Files (x86)
2015-02-27 14:41:02 ----D---- C:\Windows\system32\wbem
2015-02-27 14:39:57 ----D---- C:\Windows\Tasks
2015-02-27 14:39:57 ----D---- C:\Windows\system32\DriverStore
2015-02-27 14:39:57 ----D---- C:\Windows\system32\drivers\etc
2015-02-27 14:39:57 ----D---- C:\Windows\inf
2015-02-27 14:39:57 ----D---- C:\Users\admin\AppData\Roaming\GHISLER
2015-02-27 14:39:55 ----D---- C:\Windows\registration
2015-02-24 03:17:24 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-22 23:04:16 ----D---- C:\Users\admin\AppData\Roaming\vlc
2015-02-21 13:11:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-04-08 564792]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 cnnctfy3;Connectify LightWeight Filter; C:\Windows\system32\DRIVERS\cnnctfy3.sys [2014-10-11 42152]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-04-08 283200]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-07-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-29 152136]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-29 140752]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-12-06 13207552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-12-06 626176]
R3 arusb_win7x;Service For TP-LINK Wireless N Adapter; C:\Windows\system32\DRIVERS\arusb_win7x.sys [2010-02-23 769024]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-10-03 129512]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-10-03 394728]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-24 94208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-28 2905832]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-09-11 26248]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-09-11 15880]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-09-11 76552]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice; C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-10-08 31968]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2013-02-05 57840]
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2013-02-13 76648]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2013-02-13 85864]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 19304]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2013-10-24 27336]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2013-10-24 73216]
S3 SIUSBXP;SIUSBXP; C:\Windows\system32\drivers\SiUSBXp.sys [2010-04-30 16384]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-09-11 41096]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-09-11 36872]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [2012-07-04 999704]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-08-20 75136]
R2 WIFIGXENDHCPSER;WIFIGXENDHCPSER; C:\Program Files (x86)\My WIFI Router\bmser.exe [2014-04-23 1656416]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-25 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2012-07-04 35720]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2012-07-04 190208]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2013-02-05 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-25 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-21 1255736]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-02 262320]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-12-06 239616]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-09-23 833728]
S4 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
-----------------EOF-----------------
Ešte AdwCleaner
# AdwCleaner v4.112 - Logfile created 20/03/2015 at 17:43:20
# Updated 09/03/2015 by Xplode
# Database : 2015-03-15.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : admin - ADMIN-PC
# Running from : C:\Users\admin\Desktop\adwcleaner_4.112.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Program Files (x86)\Gophoto.it
Folder Deleted : C:\Program Files (x86)\Smart Driver Updater
Folder Deleted : C:\Program Files (x86)\TornTV.com
Folder Deleted : C:\Users\admin\AppData\Local\Mobogenie
Folder Deleted : C:\Users\admin\AppData\Roaming\Conduit
Folder Deleted : C:\Users\admin\AppData\Roaming\OpenCandy
File Deleted : C:\Users\admin\daemonprocess.txt
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\Myfree Codec
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17689
-\\ Mozilla Firefox v
-\\ Google Chrome v41.0.2272.101
*************************
AdwCleaner[R0].txt - [3085 bytes] - [20/03/2015 17:41:56]
AdwCleaner[S0].txt - [2904 bytes] - [20/03/2015 17:43:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2963 bytes] ##########