Spomalený start pc_prosím kontrolu logu

[bluenite]

v posledních dnech se mi spomalil start/restart pc s win7_64 (i3/8gb ram). Může se někdo podívat na rsitlog a doporučit co s tím jde udělat? Nebo celkově nějak umravnit některé programy, které nepoužívám (DVDVideoSoft,ABBYY FineReader,WatAdminSVC...). Dále vidím na konci chybějící soubory, dají se tyto záznamy bezpečně smazat?
díky za pomoc
Petr


Logfile of random's system information tool 1.09 (written by random/random)
Run by Peter at 2015-08-10 11:53:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 43 GB (38%) free of 114 GB
Total RAM: 8067 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:54:00, on 10.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Peter.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pravednes.cz/admin.jsp#!@bluenite
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: PXCIEaddin - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\PDF Xchange\PDF-XChange 4\PXCIEAddin4.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: (no name) - {c3c77255-42c0-499f-b664-6e981a0b1647} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: PDFXChange 4.0 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\PDF Xchange\PDF-XChange 4\PXCIEAddin4.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [FontExpertType1Loader] C:\Program Files (x86)\FontExpert\Type1Loader.exe
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\RunOnce: [GBTUpd] C:\Program Files (x86)\GIGABYTE\UpdManager\PreRun.exe
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [FontExplorerX] "C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontExplorerX.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout pomocí Net Transportu - C:\Program Files (x86)\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM FLV videa z 10 posledně požadovaných - C:\Program Files (x86)\Internet Download Manager\IEGetVL2.htm
O8 - Extra context menu item: Stáhnout s IDM obsažené FLV video - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Stáhnout vše pomocí &Net Transportu - C:\Program Files (x86)\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O9 - Extra button: Avira Browser Safety - {d8f67242-b229-4065-95fa-391b077ed6ca} - (no file)
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O18 - Protocol: abs - {E00957BD-D0E1-4EB9-A025-7743FDC8B27B} - (no file)
O20 - AppInit_DLLs: C:\Windows\Jaksta\AC\x86\jaudcap.dll
O23 - Service: ABBYY FineReader 10 CE Licensing Service (ABBYY.Licensing.FineReader.Corporate.10.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: DiskDrill Watcher (cfbackd) - CleverFiles - C:\Program Files (x86)\Disk Drill\cfbackd.w32.exe
O23 - Service: CorsairSSDTool (CorsairSSDToolBox) - Unknown owner - C:\Program Files (x86)\Corsair SSD Toolbox\CSSDTService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: FontExplorer X Pro.FontManagementService (fexservice) - FontExplorer X - C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontManagementServices.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo EasyPlus Hotspot - Lenovo - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McNeel Update Service 5.0 (McNeelUpdate) - Robert McNeel & Associates - C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe
O23 - Service: mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit (mi-raysat_3dsmax2013_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Corel License Validation Service V2 x64, Powered by arvato (PSI_SVC_2_x64) - arvato digital services llc - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13733 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\igfxCUIService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"taskhost.exe"
taskeng.exe {A4ADD2BD-8FB1-406E-8C0F-0B512A788447}
"C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontManagementServices.exe"
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\nlssrv32.exe
"C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files\Rainmeter\Rainmeter.exe"
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
igfxEM.exe
igfxHK.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Tools\Totalcmd\TOTALCMD64.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "http://www.fontexplorerx.com/docs/clien ... ro_Win.pdf"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\NOTEPAD.EXE" I:\_Data\_Aktual\dotazy Forums_utf8.txt
"I:\Prog_inst\Security\_Jine\RSIT_x64_fw\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\DriverToolkit Autorun.job
C:\Windows\tasks\GlaryInitialize 5.job
C:\Windows\tasks\GlaryUpdate 5.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d08ffa43e6237b.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d0bfaf7b2728f8.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d0bfaf7b3ef6bb.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\rcnu0ed7.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://pravednes.cz/admin.jsp#!@bluenite"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\PDF Xchange\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\PDF Xchange\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Tools\VLC\npvlc.dll


C:\Program Files (x86)\Mozilla Firefox\components\
nsIBitCometAgent.xpt
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
npBitCometAgent.dll
npDivxPlayerPlugin.dll
NPOFFICE.DLL
npPDFXCviewNPPlugin.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
nsIDivxPlayerPlugin.xpt
QuickTimePlugin.class

C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\rcnu0ed7.default\extensions\
FirefoxAddon@similarWeb.com
jid1-JrxwyxPdCKWWcw@jetpack
mozilla_cc@internetdownloadmanager.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}(2)
{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}
{ca0849e8-2c76-42ae-9abe-34e14d337acf}(2)

C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\rcnu0ed7.default\searchplugins\
duckduckgo.xml
filestubecom.xml
rapidshare-files-search.xml
torrents-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-05-25 357376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11 767280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42DFA04F-0F16-418e-B80C-AB97A5AFAD39}]
PDFXChange 4.0 - C:\Program Files\PDF Xchange\PDF-XChange 4\PXCIEAddin4.dll [2011-09-17 422992]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-05 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-05 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
DVDVideoSoft IE Extension - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-05-25 297488]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - PDFXChange 4.0 - C:\Program Files\PDF Xchange\PDF-XChange 4\PXCIEAddin4.dll [2011-09-17 422992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-10-01 5595336]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2012-02-05 415680]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2014-01-20 2611808]
"FontExplorerX"=C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontExplorerX.exe [2014-12-09 844056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-05-20 291648]
"FontExpertType1Loader"=C:\Program Files (x86)\FontExpert\Type1Loader.exe [2013-12-07 176472]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2015-05-05 448520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"GBTUpd"=C:\Program Files (x86)\GIGABYTE\UpdManager\PreRun.exe [2012-11-06 1512448]

C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\Jaksta\AC\x64\jaudcap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2015-08-10 11:53:57 ----D---- C:\rsit
2015-08-10 01:20:40 ----D---- C:\ProgramData\CorelCAD
2015-08-10 01:20:33 ----D---- C:\Users\Peter\AppData\Roaming\CorelCAD x64
2015-08-10 01:11:30 ----D---- C:\Program Files (x86)\Microsoft SDKs
2015-08-10 01:11:29 ----D---- C:\ProgramData\Microsoft Help
2015-08-10 01:11:29 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 9.0
2015-08-10 00:38:10 ----D---- C:\Program Files (x86)\Autodesk
2015-08-09 15:21:56 ----D---- C:\Windows\SYSWOW64\Analogy dir
2015-08-09 14:37:54 ----D---- C:\ProgramData\Screentime
2015-08-05 16:23:08 ----D---- C:\Users\Peter\AppData\Roaming\FastStone
2015-08-05 16:22:00 ----D---- C:\Program Files (x86)\FastStone Image Viewer
2015-08-04 18:40:28 ----D---- C:\Users\Peter\AppData\Roaming\Lasersoft Imaging
2015-08-04 18:36:39 ----D---- C:\Program Files (x86)\Tools
2015-08-04 18:36:37 ----D---- C:\Program Files (x86)\SilverFast Epson
2015-07-31 13:28:21 ----A---- C:\Windows\hpdj130.ini
2015-07-31 13:11:44 ----D---- C:\ProgramData\EFI
2015-07-31 12:59:42 ----A---- C:\Windows\InstallDE.ini
2015-07-31 12:59:06 ----D---- C:\Program Files (x86)\EFI
2015-07-31 12:58:44 ----D---- C:\Windows\SYSWOW64\Temp
2015-07-31 12:58:44 ----A---- C:\Windows\SYSWOW64\MPIWIN32.DLL
2015-07-31 12:58:44 ----A---- C:\Windows\SYSWOW64\drivers\CBUSB.SYS
2015-07-31 12:58:44 ----A---- C:\Windows\SYSWOW64\CBNDLL.DLL
2015-07-31 10:21:56 ----D---- C:\ProgramData\IMSIDesign
2015-07-31 10:21:56 ----D---- C:\Program Files (x86)\IMSIDesign
2015-07-31 10:18:20 ----D---- C:\Program Files (x86)\DoubleCAD XT v5
2015-07-27 13:18:26 ----D---- C:\Users\Peter\AppData\Roaming\White Peak Software
2015-07-26 22:34:04 ----D---- C:\ProgramData\Sony
2015-07-26 22:34:04 ----D---- C:\Program Files (x86)\Sony
2015-07-25 11:35:50 ----D---- C:\Program Files (x86)\Runtime Software_fat
2015-07-25 10:36:36 ----D---- C:\Program Files (x86)\Runtime Software_simple
2015-07-25 10:33:01 ----D---- C:\Program Files (x86)\Runtime Software
2015-07-24 11:51:11 ----D---- C:\Users\Peter\AppData\Roaming\Cleverfiles Software
2015-07-24 11:50:56 ----D---- C:\Program Files (x86)\Disk Drill
2015-07-24 01:34:55 ----D---- C:\Program Files\Media Preview
2015-07-24 01:34:55 ----D---- C:\Program Files (x86)\Media Preview
2015-07-23 23:58:50 ----D---- C:\Users\Peter\AppData\Roaming\Winamp
2015-07-23 21:35:47 ----D---- C:\Program Files\EaseUS
2015-07-22 03:00:19 ----D---- C:\Users\Peter\AppData\Roaming\Wise Data Recovery
2015-07-22 02:03:37 ----D---- C:\Program Files (x86)\Picasa3
2015-07-22 01:57:36 ----A---- C:\Windows\SYSWOW64\unrar.dll
2015-07-22 01:57:34 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2015-07-22 01:57:24 ----D---- C:\Program Files\Open Freely
2015-07-20 21:38:38 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-07-20 21:38:38 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-07-20 21:38:38 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-07-20 21:38:38 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-07-20 21:38:38 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-07-20 21:38:38 ----A---- C:\Windows\system32\lpk.dll
2015-07-20 21:38:38 ----A---- C:\Windows\system32\fontsub.dll
2015-07-20 21:38:38 ----A---- C:\Windows\system32\dciman32.dll
2015-07-20 21:38:38 ----A---- C:\Windows\system32\atmlib.dll
2015-07-20 21:38:38 ----A---- C:\Windows\system32\atmfd.dll
2015-07-20 20:43:08 ----D---- C:\ProgramData\Hewlett-Packard
2015-07-20 20:43:03 ----A---- C:\Windows\system32\hpmtp130.dll
2015-07-20 20:43:03 ----A---- C:\Windows\system32\hpmml130.dll
2015-07-20 20:43:03 ----A---- C:\Windows\system32\hpmlm121.dll
2015-07-20 20:43:03 ----A---- C:\Windows\system32\hpmja130.dll
2015-07-20 20:43:03 ----A---- C:\Windows\system32\hpcpn130.dll
2015-07-20 20:43:02 ----A---- C:\Windows\SYSWOW64\hpcc3130.dll
2015-07-20 19:37:03 ----A---- C:\Windows\hplj1300.ini
2015-07-20 14:09:12 ----D---- C:\Windows\Vbox
2015-07-20 11:24:39 ----A---- C:\Windows\SYSWOW64\VB5DB.DLL
2015-07-19 13:21:00 ----D---- C:\Program Files (x86)\Ginipic
2015-07-17 23:14:14 ----D---- C:\ProgramData\X-Fonter
2015-07-17 23:14:14 ----D---- C:\Program Files (x86)\X-Fonter
2015-07-16 13:04:13 ----D---- C:\Program Files (x86)\FontExplorer X
2015-07-16 13:03:34 ----D---- C:\ProgramData\FontExplorer X
2015-07-15 10:44:00 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-07-15 10:44:00 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-07-15 10:44:00 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-07-15 10:44:00 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-07-15 10:44:00 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:44:00 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:43:59 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-07-15 10:43:59 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-07-15 10:43:59 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:43:59 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-07-15 10:43:59 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-07-15 10:43:59 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:43:59 ----A---- C:\Windows\system32\iernonce.dll
2015-07-15 10:43:59 ----A---- C:\Windows\system32\ie4uinit.exe
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-07-15 10:43:58 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-07-15 10:43:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:43:58 ----A---- C:\Windows\system32\msfeeds.dll
2015-07-15 10:43:58 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:43:58 ----A---- C:\Windows\system32\iedkcs32.dll
2015-07-15 10:43:58 ----A---- C:\Windows\system32\dxtrans.dll
2015-07-15 10:43:57 ----A---- C:\Windows\system32\iesetup.dll
2015-07-15 10:43:57 ----A---- C:\Windows\system32\ieapfltr.dll
2015-07-15 10:43:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-07-15 10:43:56 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-07-15 10:43:56 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-07-15 10:43:56 ----A---- C:\Windows\system32\vbscript.dll
2015-07-15 10:43:56 ----A---- C:\Windows\system32\jsproxy.dll
2015-07-15 10:43:56 ----A---- C:\Windows\system32\ieUnatt.exe
2015-07-15 10:43:56 ----A---- C:\Windows\system32\dxtmsft.dll
2015-07-15 10:43:55 ----A---- C:\Windows\system32\wininet.dll
2015-07-15 10:43:55 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:43:55 ----A---- C:\Windows\system32\mshtmled.dll
2015-07-15 10:43:55 ----A---- C:\Windows\system32\jscript.dll
2015-07-15 10:43:54 ----A---- C:\Windows\system32\msrating.dll
2015-07-15 10:43:54 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:43:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-07-15 10:43:52 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-07-15 10:43:52 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-07-15 10:43:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-07-15 10:43:52 ----A---- C:\Windows\system32\urlmon.dll
2015-07-15 10:43:51 ----A---- C:\Windows\system32\mshtml.dll
2015-07-15 10:43:51 ----A---- C:\Windows\system32\ieui.dll
2015-07-15 10:43:51 ----A---- C:\Windows\system32\ieframe.dll
2015-07-15 10:43:50 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-07-15 10:43:50 ----A---- C:\Windows\system32\iertutil.dll
2015-07-15 10:43:18 ----A---- C:\Windows\system32\lsasrv.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-07-15 10:43:17 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\wdigest.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\TSpkg.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\sspisrv.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\sspicli.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\schannel.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\secur32.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\rpcrt4.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\ncrypt.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\msv1_0.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\msobjs.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\msaudite.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\lsass.exe
2015-07-15 10:43:17 ----A---- C:\Windows\system32\kerberos.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-07-15 10:43:17 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-07-15 10:43:17 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-07-15 10:43:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-07-15 10:43:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-07-15 10:43:17 ----A---- C:\Windows\system32\cryptbase.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\credssp.dll
2015-07-15 10:43:17 ----A---- C:\Windows\system32\auditpol.exe
2015-07-15 10:43:17 ----A---- C:\Windows\system32\adtschema.dll
2015-07-15 10:43:10 ----A---- C:\Windows\SYSWOW64\cewmdm.dll
2015-07-15 10:43:10 ----A---- C:\Windows\system32\win32k.sys
2015-07-15 10:43:10 ----A---- C:\Windows\system32\cewmdm.dll
2015-07-15 10:43:09 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-07-15 10:43:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 10:43:09 ----A---- C:\Windows\system32\rdpcorets.dll
2015-07-15 10:43:09 ----A---- C:\Windows\system32\gdi32.dll
2015-07-15 10:43:08 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-07-15 10:43:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-07-15 10:43:08 ----A---- C:\Windows\system32\wksprt.exe
2015-07-15 10:43:08 ----A---- C:\Windows\system32\mstscax.dll
2015-07-15 10:43:08 ----A---- C:\Windows\system32\jscript9diag.dll
2015-07-15 10:43:08 ----A---- C:\Windows\system32\jscript9.dll
2015-07-15 10:43:07 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-07-15 10:43:07 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-07-15 10:43:07 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-07-15 10:43:06 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-07-15 10:43:06 ----A---- C:\Windows\SYSWOW64\ole32.dll
2015-07-15 10:43:06 ----A---- C:\Windows\system32\tsgqec.dll
2015-07-15 10:43:06 ----A---- C:\Windows\system32\ole32.dll
2015-07-15 10:43:05 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-07-15 10:43:05 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-07-15 10:43:05 ----A---- C:\Windows\system32\msiexec.exe
2015-07-15 10:43:05 ----A---- C:\Windows\system32\msi.dll
2015-07-15 10:43:05 ----A---- C:\Windows\system32\consent.exe
2015-07-15 10:43:05 ----A---- C:\Windows\system32\authui.dll
2015-07-15 10:43:04 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2015-07-15 10:43:04 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2015-07-15 10:43:04 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2015-07-15 10:43:04 ----A---- C:\Windows\system32\msimsg.dll
2015-07-15 10:43:04 ----A---- C:\Windows\system32\msihnd.dll
2015-07-15 10:43:04 ----A---- C:\Windows\system32\appinfo.dll
2015-07-11 04:33:46 ----A---- C:\Windows\SYSWOW64\GPhotos.scr

======List of files/folders modified in the last 1 month======

2015-08-10 11:54:00 ----D---- C:\Program Files\trend micro
2015-08-10 11:25:31 ----D---- C:\Windows\Microsoft.NET
2015-08-10 11:24:57 ----RSD---- C:\Windows\assembly
2015-08-10 10:58:06 ----D---- C:\Windows\Temp
2015-08-10 10:52:16 ----D---- C:\Users\Peter\AppData\Roaming\DMCache
2015-08-10 10:08:34 ----D---- C:\Windows\system32\config
2015-08-10 10:01:23 ----D---- C:\Windows\System32
2015-08-10 10:01:23 ----D---- C:\Windows\inf
2015-08-10 10:01:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-10 01:20:40 ----D---- C:\ProgramData
2015-08-10 01:13:12 ----SHD---- C:\Windows\Installer
2015-08-10 01:13:12 ----D---- C:\Windows\winsxs
2015-08-10 01:13:03 ----D---- C:\Users\Peter\AppData\Roaming\Microsoft
2015-08-10 01:13:03 ----D---- C:\ProgramData\Microsoft
2015-08-10 01:12:43 ----D---- C:\Program Files\Corel
2015-08-10 01:12:43 ----D---- C:\Program Files (x86)\Common Files
2015-08-10 01:12:37 ----SHD---- C:\System Volume Information
2015-08-10 01:11:30 ----D---- C:\Program Files (x86)
2015-08-10 01:09:59 ----D---- C:\Windows\system32\NDF
2015-08-10 00:45:00 ----AD---- C:\ProgramData\TEMP
2015-08-10 00:39:27 ----D---- C:\Program Files\Autodesk
2015-08-10 00:38:44 ----SD---- C:\Windows\Fonts
2015-08-10 00:38:44 ----D---- C:\Program Files\Common Files\Autodesk Shared
2015-08-10 00:38:42 ----D---- C:\Windows\Downloaded Program Files
2015-08-10 00:38:41 ----D---- C:\ProgramData\Autodesk
2015-08-10 00:38:07 ----AD---- C:\Windows
2015-08-10 00:29:00 ----D---- C:\Windows\SysWOW64
2015-08-09 18:51:02 ----D---- C:\Users\Peter\AppData\Roaming\BitComet
2015-08-09 16:57:27 ----D---- C:\Program Files
2015-08-09 13:25:15 ----D---- C:\Windows\Logs
2015-08-08 10:04:21 ----D---- C:\Users\Peter\AppData\Roaming\Skype
2015-08-07 12:39:59 ----D---- C:\Tools
2015-08-07 11:50:19 ----D---- C:\Users\Peter\AppData\Roaming\vlc
2015-08-05 17:01:27 ----D---- C:\ProgramData\Oracle
2015-08-05 16:56:21 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-08-05 16:56:17 ----D---- C:\Program Files (x86)\Java
2015-08-05 16:54:51 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-03 07:25:55 ----D---- C:\Windows\system32\catroot2
2015-08-01 12:25:17 ----D---- C:\Program Files (x86)\Google
2015-07-31 13:35:56 ----D---- C:\Program Files (x86)\Hewlett-Packard
2015-07-31 13:35:22 ----D---- C:\Windows\system32\DriverStore
2015-07-31 13:35:22 ----D---- C:\Windows\system32\catroot
2015-07-31 12:59:06 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-07-31 12:58:44 ----D---- C:\Windows\SYSWOW64\drivers
2015-07-30 20:16:18 ----D---- C:\Users\Peter\AppData\Roaming\Mp3tag
2015-07-30 09:14:32 ----RD---- C:\Program Files (x86)\Skype
2015-07-30 09:14:20 ----D---- C:\ProgramData\Skype
2015-07-27 22:22:06 ----D---- C:\Program Files\Recuva
2015-07-23 21:46:46 ----D---- C:\Windows\system32\drivers
2015-07-23 20:50:45 ----D---- C:\Program Files (x86)\Avira
2015-07-20 14:49:53 ----D---- C:\Windows\Downloaded Installations
2015-07-19 09:46:08 ----D---- C:\ProgramData\pdf995
2015-07-16 12:09:20 ----D---- C:\Windows\Tasks
2015-07-16 12:09:20 ----D---- C:\Windows\system32\Tasks
2015-07-15 17:07:27 ----D---- C:\Windows\rescache
2015-07-15 15:05:37 ----D---- C:\Users\Peter\AppData\Roaming\SketchUp
2015-07-15 15:05:37 ----D---- C:\ProgramData\SketchUp
2015-07-15 11:53:59 ----D---- C:\Windows\SYSWOW64\en-US
2015-07-15 11:53:59 ----D---- C:\Windows\system32\en-US
2015-07-15 11:53:59 ----D---- C:\Program Files\Internet Explorer
2015-07-15 11:53:59 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-15 11:53:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-07-15 11:53:58 ----D---- C:\Windows\system32\cs-CZ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2014-10-10 241368]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2014-10-10 63160]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-05-20 19264]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2014-06-04 21184]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2013-10-28 22240]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2014-10-10 243440]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2014-10-10 169280]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2014-10-10 44632]
R1 Eve;EVE Protocol Driver; C:\Windows\system32\DRIVERS\eve.sys [2014-04-10 41304]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-12-21 20160]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2014-12-30 26528]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2014-10-10 222280]
R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2012-04-23 154272]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2014-04-18 36600]
R3 anvsnddrv;AnvSoft Virtual Sound Device; C:\Windows\system32\drivers\anvsnddrv.sys [2011-11-28 33872]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-03-30 3787704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-08-27 3613528]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-03-30 454416]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-05-20 357184]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-05-20 789824]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
S1 UsbCharger;UsbCharger; C:\Windows\system32\DRIVERS\UsbCharger.sys [2013-10-24 22240]
S3 CisUtMonitor;CisUtMonitor; C:\Windows\system32\DRIVERS\CisUtMonitor.sys [2011-10-30 33360]
S3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2014-03-19 76496]
S3 DCamUSBVM;Lenovo Q350 USB PC Camera; C:\Windows\System32\Drivers\usbVM31b.sys [2005-09-19 142336]
S3 dcdbas;System Management Driver; C:\Windows\system32\DRIVERS\dcdbas64.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2015-06-10 21712]
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2015-06-24 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2015-06-24 25640]
S3 GENERICDRV;GENERICDRV; \??\C:\Program Files (x86)\GIGABYTE\ET6\amifldrv64.sys [2011-05-05 13864]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2015-06-24 30528]
S3 ksapi64;ksapi64; \??\C:\Windows\system32\drivers\ksapi64.sys [2015-05-02 56680]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2014-03-19 77592]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2014-03-19 13080]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2014-03-19 76568]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2014-03-19 59160]
S3 MDA_NTDRV;MDA_NTDRV; \??\C:\Windows\syswow64\MDA_NTDRV.sys []
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2014-03-19 50896]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-04-30 23200]
S4 IObitUnlocker;IObitUnlocker; \??\C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [2015-03-16 36544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-01-31 19232]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-10-01 1349576]
R2 fexservice;FontExplorer X Pro.FontManagementService; C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontManagementServices.exe [2014-12-09 69912]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-03-30 317640]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\SysWOW64\nlssrv32.exe [2012-03-28 66560]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 PSI_SVC_2_x64;Corel License Validation Service V2 x64, Powered by arvato; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2014-04-30 337776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04 107912]
S3 ABBYY.Licensing.FineReader.Corporate.10.0;ABBYY FineReader 10 CE Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe [2009-12-19 814344]
S3 AdvancedSystemCareService8;Advanced SystemCare Service 8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [2014-11-04 815392]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 cfbackd;DiskDrill Watcher; C:\Program Files (x86)\Disk Drill\cfbackd.w32.exe [2014-08-31 211520]
S3 CorsairSSDToolBox;CorsairSSDTool; C:\Program Files (x86)\Corsair SSD Toolbox\CSSDTService.exe [2014-12-05 1864808]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-03-30 279240]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2015-02-22 1432400]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-12-02 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04 107912]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-06-20 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 Lenovo EasyPlus Hotspot;Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe [2015-04-24 625640]
S3 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2014-12-10 2631456]
S3 McNeelUpdate;McNeel Update Service 5.0; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [2002-02-02 68192]
S3 mi-raysat_3dsmax2013_64;mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit; C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe [2011-09-15 86016]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-06-28 148136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-03 327296]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 SystemExplorerHelpService;System Explorer Service; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [2014-12-20 820960]
S3 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-05-20 5491984]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-18 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[vyosek]

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku