Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventivní kontrola RSIT logu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Kajry
Návštěvník
Návštěvník
Příspěvky: 1
Registrován: 06 led 2009 23:09

Preventivní kontrola RSIT logu

#1 Příspěvek od Kajry »

Prosím o preventivku logu:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Kajry at 2013-06-03 13:00:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 115 GB (37%) free of 310 GB
Total RAM: 8136 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:00:28, on 3.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Users\Kajry\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\syswow64\MsiExec.exe
C:\Program Files\trend micro\Kajry.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 212.80.69.80 test1.voyo.nova.cz
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: LastPass Vault - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [HP Officejet 6500 E710a-f (NET)] "C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BH451BX05JZ:NW" -scfn "HP Officejet 6500 E710a-f (NET)" -AutoStart 1
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-189296749-43452174-826550717-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-189296749-43452174-826550717-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = C:\Users\Kajry\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Fences.lnk = C:\Program Files (x86)\Stardock\Fences\Fences.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: LastPass - file://C:\Users\Kajry\AppData\LocalLow\LastPass\context.html?cmd=lastpass
O8 - Extra context menu item: LastPass vyplňování formulářů - file://C:\Users\Kajry\AppData\LocalLow\LastPass\context.html?cmd=fillforms
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll
O9 - Extra 'Tools' menuitem: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Kaspersky Endpoint Security Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 14873 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"taskhost.exe"
taskeng.exe {BC3EDED0-A1AA-4F2D-8AC4-67622A21FD01}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Windows\system32\Dwm.exe"
"explorer.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe" -r
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
WLIDSvcM.exe 2200
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe" -deviceID "CN1BH451BX05JZ:NW" -scfn "HP Officejet 6500 E710a-f (NET)" -AutoStart 1
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Users\Kajry\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe" -Embedding
"C:\Windows\system32\wuauclt.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\wuauclt.exe" /RunHandlerComServer
"C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe"
C:\Windows\system32\msiexec.exe /V
"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\MsiExec.exe -Embedding 81D04DDCFC59AD5E17DB345718B800AD
C:\Windows\syswow64\MsiExec.exe -Embedding E10EA5272EF8D0710E51A1F85CB1CEAA
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Kajry\AppData\Roaming\Mozilla\Firefox\Profiles\3c9rfyxa.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll

C:\Users\Kajry\AppData\Roaming\Mozilla\Firefox\Profiles\3c9rfyxa.default\extensions\
support@lastpass.com
{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-02-17 205376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar_x64.dll [2013-05-28 910336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2013-03-19 2328760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-25 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll [2011-03-19 164496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E}]
LastPass Vault - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll [2013-05-28 608256]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2013-03-19 1724600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar_x64.dll [2013-05-28 910336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll [2011-03-19 164496]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-12-18 343784]
{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - LastPass Toolbar - C:\Users\Kajry\AppData\Roaming\LastPass\LPToolbar.dll [2013-05-28 608256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-28 2841896]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-03-22 442352]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2013-04-22 789920]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2013-03-22 172016]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-03-22 399856]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-04-22 5908928]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-04-22 9753024]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-02 12921488]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]
"Fences"=C:\Program Files (x86)\Stardock\Fences\Fences.exe [2012-10-29 4017368]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2011-08-17 4527424]
"AdobeBridge"= []
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"HP Officejet 6500 E710a-f (NET)"=C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2012-12-18 825560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [2012-12-18 39136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-30 499608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelPAN]
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe /tf Intel PAN Tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28 18643048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Hry\Steam\Steam.exe [2013-05-04 1635752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Kajry^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
C:\Users\Kajry\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-05-29 28393304]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe [2013-01-20 729744]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
""= []
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

C:\Users\Kajry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Kajry\AppData\Roaming\Dropbox\bin\Dropbox.exe
Fences.lnk - C:\Program Files (x86)\Stardock\Fences\Fences.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-03-08 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2012-10-29 551640]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisplayLastLogonInfo"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2013-06-03 12:54:28 ----D---- C:\Program Files\trend micro
2013-06-03 12:54:26 ----D---- C:\rsit
2013-06-03 12:25:03 ----SHD---- C:\Config.Msi
2013-06-02 14:43:11 ----A---- C:\Windows\system32\SysInternalsBluescreen.scr
2013-06-02 13:19:14 ----A---- C:\Windows\system32\FNTCACHE.DAT
2013-06-01 22:05:10 ----D---- C:\Program Files (x86)\Hewlett-Packard
2013-06-01 22:04:53 ----D---- C:\Users\Kajry\AppData\Roaming\HpUpdate
2013-06-01 22:04:49 ----N---- C:\Windows\system32\HPDiscoPM5512.dll
2013-06-01 22:04:31 ----D---- C:\ProgramData\HP
2013-06-01 22:04:31 ----D---- C:\Program Files (x86)\HP
2013-06-01 22:04:30 ----D---- C:\Program Files\HP
2013-06-01 22:04:21 ----A---- C:\ProgramData\Ament.ini
2013-06-01 15:55:21 ----D---- C:\Program Files (x86)\Mp3tag
2013-06-01 15:16:41 ----D---- C:\Program Files (x86)\Mafia 2 Multiplayer
2013-05-31 18:38:42 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-05-30 23:35:43 ----D---- C:\ProgramData\Last.fm
2013-05-30 23:35:17 ----D---- C:\Program Files (x86)\Last.fm
2013-05-30 20:54:18 ----D---- C:\Program Files\KMSnano
2013-05-29 13:47:48 ----D---- C:\Program Files (x86)\RocketDock
2013-05-29 13:40:13 ----D---- C:\Program Files\Common Files\DESIGNER
2013-05-29 13:39:54 ----D---- C:\Program Files\Microsoft.NET
2013-05-29 13:39:54 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2013-05-29 13:39:40 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2013-05-29 13:39:12 ----D---- C:\Program Files\Microsoft SQL Server
2013-05-29 13:37:16 ----HDC---- C:\ProgramData\{0F4A7EFE-5950-4389-BF36-1E625D72456B}
2013-05-29 13:36:47 ----D---- C:\Program Files\Microsoft Analysis Services
2013-05-29 13:36:47 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-05-29 13:36:38 ----D---- C:\Program Files (x86)\Microsoft Office
2013-05-29 13:36:30 ----RHD---- C:\MSOCache
2013-05-29 13:24:11 ----D---- C:\Users\Kajry\AppData\Roaming\Stardock
2013-05-29 00:28:06 ----D---- C:\ProgramData\Codemasters
2013-05-29 00:28:00 ----D---- C:\ProgramData\Steam
2013-05-28 15:18:58 ----D---- C:\Users\Kajry\AppData\Roaming\LastPass
2013-05-28 00:41:27 ----D---- C:\ProgramData\FLEXnet
2013-05-27 22:03:46 ----D---- C:\Program Files\Common Files\Macrovision Shared
2013-05-27 22:01:32 ----D---- C:\Program Files\Autodesk
2013-05-27 21:56:37 ----D---- C:\Users\Kajry\AppData\Roaming\Autodesk
2013-05-27 21:56:37 ----D---- C:\ProgramData\Autodesk
2013-05-27 21:53:08 ----D---- C:\Autodesk
2013-05-27 11:52:48 ----D---- C:\ProgramData\RELOADED
2013-05-24 16:18:28 ----D---- C:\Windows\SYSWOW64\NV
2013-05-24 16:18:28 ----D---- C:\Windows\system32\NV
2013-05-24 16:15:20 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-24 16:15:20 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-24 16:15:20 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-24 16:15:20 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-05-24 16:15:20 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-24 16:15:19 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\NvIFR64.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\NvFBC64.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvdispgenco6432018.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvdispco6432018.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-24 16:15:19 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-22 22:52:35 ----A---- C:\Windows\system32\nvdispgenco6432014.dll
2013-05-22 22:52:35 ----A---- C:\Windows\system32\nvdispco6432014.dll
2013-05-20 23:26:07 ----D---- C:\Users\Kajry\AppData\Roaming\Opera
2013-05-20 23:25:43 ----D---- C:\Program Files (x86)\Opera
2013-05-16 23:27:36 ----D---- C:\Users\Kajry\AppData\Roaming\Apple Computer
2013-05-16 23:26:41 ----D---- C:\ProgramData\Apple Computer
2013-05-16 23:26:41 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-05-16 23:26:03 ----D---- C:\ProgramData\Apple
2013-05-16 03:08:55 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-16 03:08:55 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-16 03:08:55 ----A---- C:\Windows\system32\cdd.dll
2013-05-16 03:08:33 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-16 03:08:33 ----A---- C:\Windows\system32\authui.dll
2013-05-16 03:08:32 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-16 03:08:32 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-16 03:08:32 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-16 03:08:31 ----A---- C:\Windows\system32\shell32.dll
2013-05-16 03:08:31 ----A---- C:\Windows\system32\consent.exe
2013-05-16 03:08:31 ----A---- C:\Windows\system32\appinfo.dll
2013-05-16 03:08:21 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-16 03:08:21 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-16 03:08:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-16 03:08:18 ----A---- C:\Windows\system32\mshtml.dll
2013-05-16 03:08:15 ----A---- C:\Windows\system32\win32k.sys
2013-05-15 22:25:01 ----D---- C:\ProgramData\Energy Management
2013-05-15 11:07:32 ----D---- C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-05-15 10:36:57 ----D---- C:\Users\Kajry\AppData\Roaming\fofix
2013-05-15 10:33:33 ----D---- C:\Program Files (x86)\Frets on Fire
2013-05-15 10:18:57 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2013-05-14 12:12:29 ----D---- C:\ProgramData\Stardock
2013-05-14 00:41:14 ----HDC---- C:\ProgramData\{B393F1D7-D0DD-4E77-8B90-DAE8AF494E5B}
2013-05-14 00:41:04 ----D---- C:\Program Files (x86)\Stardock
2013-05-14 00:02:29 ----A---- C:\Windows\system32\shell32_backup_wti.dll
2013-05-14 00:02:29 ----A---- C:\Windows\system32\OobeFldr_backup_wti.dll
2013-05-14 00:02:29 ----A---- C:\Windows\system32\ExplorerFrame_backup_wti.dll
2013-05-14 00:02:29 ----A---- C:\Windows\explorer_backup_wti.exe
2013-05-14 00:02:27 ----A---- C:\Windows\UTP.exe
2013-05-13 23:57:55 ----A---- C:\Windows\expstart.exe
2013-05-13 23:57:02 ----A---- C:\Windows\explorer.backup.exe
2013-05-13 23:39:34 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-05-13 23:28:19 ----D---- C:\ProgramData\ALM
2013-05-13 23:12:30 ----D---- C:\Program Files (x86)\Adobe Story
2013-05-13 23:10:49 ----N---- C:\Windows\system32\drivers\cdr4_xp.sys
2013-05-13 23:10:48 ----N---- C:\Windows\system32\drivers\PxHlpa64.sys
2013-05-13 23:10:48 ----N---- C:\Windows\system32\drivers\cdralw2k.sys
2013-05-13 23:10:47 ----D---- C:\Program Files (x86)\My Company Name
2013-05-13 23:07:55 ----D---- C:\Program Files\Common Files\Adobe
2013-05-13 23:07:49 ----D---- C:\Program Files\Adobe
2013-05-12 11:40:09 ----D---- C:\Program Files\GIMP 2
2013-05-10 14:00:07 ----D---- C:\Users\Kajry\AppData\Roaming\BCGameTime
2013-05-06 22:37:21 ----D---- C:\Users\Kajry\AppData\Roaming\Notepad++
2013-05-06 22:37:21 ----D---- C:\Program Files (x86)\Notepad++
2013-05-04 20:48:25 ----D---- C:\ProgramData\InstallShield
2013-05-04 20:47:59 ----A---- C:\Windows\system32\drivers\uxkx164.sys

======List of files/folders modified in the last 1 month======

2013-06-03 13:00:28 ----D---- C:\Windows\Prefetch
2013-06-03 13:00:28 ----D---- C:\Users\Kajry\AppData\Roaming\Dropbox
2013-06-03 13:00:27 ----D---- C:\Windows\Temp
2013-06-03 13:00:26 ----SHD---- C:\Windows\Installer
2013-06-03 12:57:15 ----A---- C:\Windows\SYSWOW64\log.txt
2013-06-03 12:56:37 ----D---- C:\Windows\system32\config
2013-06-03 12:54:28 ----RD---- C:\Program Files
2013-06-03 12:53:30 ----D---- C:\ProgramData\Kaspersky Lab
2013-06-03 12:51:18 ----D---- C:\Users\Kajry\AppData\Roaming\vlc
2013-06-03 12:29:57 ----RSD---- C:\Windows\assembly
2013-06-03 12:29:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-03 12:29:20 ----D---- C:\Windows\system32\cs-CZ
2013-06-03 12:27:33 ----D---- C:\Windows\SysWOW64
2013-06-03 12:27:33 ----D---- C:\Windows\System32
2013-06-03 12:26:59 ----D---- C:\Users\Kajry\AppData\Roaming\Skype
2013-06-03 12:25:12 ----D---- C:\Windows\Microsoft.NET
2013-06-03 12:25:10 ----D---- C:\Windows\SYSWOW64\en-US
2013-06-03 12:25:10 ----D---- C:\Windows\system32\en-US
2013-06-03 12:23:53 ----D---- C:\Windows
2013-06-02 22:07:49 ----D---- C:\Windows\rescache
2013-06-02 21:16:55 ----D---- C:\Windows\winsxs
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\it-IT
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\es-ES
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\el-GR
2013-06-02 21:16:44 ----D---- C:\Windows\SYSWOW64\de-DE
2013-06-02 21:16:43 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-06-02 21:16:43 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-06-02 21:16:43 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-06-02 21:16:43 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-06-02 21:16:43 ----D---- C:\Windows\SYSWOW64\da-DK
2013-06-02 21:16:42 ----D---- C:\Windows\system32\zh-TW
2013-06-02 21:16:42 ----D---- C:\Windows\system32\zh-HK
2013-06-02 21:16:42 ----D---- C:\Windows\system32\zh-CN
2013-06-02 21:16:42 ----D---- C:\Windows\system32\tr-TR
2013-06-02 21:16:42 ----D---- C:\Windows\system32\sv-SE
2013-06-02 21:16:42 ----D---- C:\Windows\system32\ru-RU
2013-06-02 21:16:42 ----D---- C:\Windows\system32\pt-PT
2013-06-02 21:16:42 ----D---- C:\Windows\system32\pt-BR
2013-06-02 21:16:42 ----D---- C:\Windows\system32\pl-PL
2013-06-02 21:16:42 ----D---- C:\Windows\system32\nl-NL
2013-06-02 21:16:42 ----D---- C:\Windows\system32\nb-NO
2013-06-02 21:16:42 ----D---- C:\Windows\system32\ko-KR
2013-06-02 21:16:42 ----D---- C:\Windows\system32\ja-JP
2013-06-02 21:16:42 ----D---- C:\Windows\system32\it-IT
2013-06-02 21:16:42 ----D---- C:\Windows\system32\hu-HU
2013-06-02 21:16:42 ----D---- C:\Windows\system32\fr-FR
2013-06-02 21:16:42 ----D---- C:\Windows\system32\fi-FI
2013-06-02 21:16:42 ----D---- C:\Windows\system32\es-ES
2013-06-02 21:16:42 ----D---- C:\Windows\system32\el-GR
2013-06-02 21:16:42 ----D---- C:\Windows\system32\de-DE
2013-06-02 21:16:42 ----D---- C:\Windows\system32\da-DK
2013-06-02 15:40:15 ----D---- C:\Windows\system32\drivers
2013-06-02 15:39:39 ----D---- C:\Windows\system32\drivers\UMDF
2013-06-02 13:19:08 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-02 02:18:45 ----D---- C:\Users\Kajry\AppData\Roaming\Winamp
2013-06-01 22:07:20 ----D---- C:\Windows\system32\Tasks
2013-06-01 22:05:42 ----D---- C:\Windows\inf
2013-06-01 22:05:10 ----RD---- C:\Program Files (x86)
2013-06-01 22:04:47 ----D---- C:\Windows\system32\catroot
2013-06-01 22:04:46 ----D---- C:\Windows\system32\DriverStore
2013-06-01 22:04:43 ----D---- C:\Windows\system32\catroot2
2013-06-01 22:04:31 ----HD---- C:\ProgramData
2013-06-01 22:04:31 ----D---- C:\Windows\twain_32
2013-06-01 16:15:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-01 16:04:18 ----D---- C:\Users\Kajry\AppData\Roaming\DAEMON Tools Pro
2013-05-30 20:55:19 ----SD---- C:\Users\Kajry\AppData\Roaming\Microsoft
2013-05-30 03:07:35 ----D---- C:\ProgramData\Microsoft Help
2013-05-30 03:01:49 ----A---- C:\Windows\win.ini
2013-05-30 00:24:19 ----D---- C:\Hry
2013-05-29 23:58:27 ----D---- C:\Program Files\JDownloader 2
2013-05-29 13:47:34 ----RSD---- C:\Windows\Fonts
2013-05-29 13:40:21 ----D---- C:\Windows\ShellNew
2013-05-29 13:40:19 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-05-29 13:40:13 ----D---- C:\Program Files\Common Files
2013-05-29 13:39:54 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-29 13:39:19 ----D---- C:\Program Files\Microsoft Office
2013-05-29 13:39:12 ----SD---- C:\ProgramData\Microsoft
2013-05-29 12:51:00 ----D---- C:\Program Files (x86)\MSBuild
2013-05-29 02:00:56 ----D---- C:\Program Files (x86)\Google
2013-05-28 16:06:34 ----D---- C:\Windows\Logs
2013-05-28 15:09:22 ----D---- C:\Users\Kajry\AppData\Roaming\Mozilla
2013-05-28 14:59:35 ----D---- C:\Program Files (x86)\Common Files
2013-05-28 14:47:04 ----D---- C:\Windows\Downloaded Program Files
2013-05-28 14:45:32 ----D---- C:\Program Files\CCleaner
2013-05-24 16:18:28 ----D---- C:\ProgramData\NVIDIA
2013-05-22 22:49:33 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-22 22:47:32 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-22 22:43:50 ----D---- C:\Windows\LiveKernelReports
2013-05-21 00:15:52 ----D---- C:\Windows\Tasks
2013-05-20 23:48:59 ----D---- C:\Windows\SYSWOW64\LogFiles
2013-05-20 23:48:59 ----D---- C:\Windows\system32\LogFiles
2013-05-20 23:40:42 ----D---- C:\ProgramData\Adobe
2013-05-20 23:40:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-20 13:47:41 ----D---- C:\Users\Kajry\AppData\Roaming\Adobe
2013-05-19 11:19:26 ----DC---- C:\Windows\system32\DRVSTORE
2013-05-16 21:24:56 ----D---- C:\Windows\debug
2013-05-16 03:27:58 ----D---- C:\Windows\system32\wdi
2013-05-16 03:24:12 ----D---- C:\Windows\AppPatch
2013-05-16 03:06:06 ----A---- C:\Windows\system32\MRT.exe
2013-05-14 15:43:47 ----SHD---- C:\System Volume Information
2013-05-14 12:14:06 ----D---- C:\Program Files (x86)\Adobe
2013-05-14 00:11:25 ----D---- C:\Windows\system32\oobe
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-12 22:34:14 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-12 22:34:12 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-12 22:34:12 ----A---- C:\Windows\system32\nvshext.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nvmctray.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nv3dappshextr.dll
2013-05-12 22:34:11 ----A---- C:\Windows\system32\nv3dappshext.dll
2013-05-04 20:48:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 HybridDisk;HybridDisk; C:\Windows\System32\DRIVERS\HybridDiskX64.sys [2010-03-02 38496]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-12 439320]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2012-06-19 458584]
R0 klfde;Kaspersky Lab Full Disk Encryption; C:\Windows\system32\DRIVERS\klfde.sys [2012-12-15 158744]
R0 LHDmgr;LHDmgr; C:\Windows\System32\DRIVERS\LhdX64.sys [2013-04-22 39008]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2013-05-12 30496]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2013-04-25 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-04-23 530488]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-04-30 271424]
R1 hybridcfile;hybridcfile; C:\Windows\system32\DRIVERS\HybridCFileX64.sys [2010-03-02 13920]
R1 KLFLTDEV;Kaspersky Lab KLFltDev; C:\Windows\system32\DRIVERS\klfltdev.sys [2012-09-13 32088]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2013-04-24 644368]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2012-11-23 28504]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2012-11-22 54104]
R1 klvfs;Kaspersky Lab klvfs; C:\Windows\system32\DRIVERS\klvfs.sys [2013-01-17 215312]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2012-11-16 178008]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2013-04-22 29792]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-03-08 5358016]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-07-10 4083600]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-03-12 342528]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2012-06-22 174176]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-09 425000]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
R3 rtsuvc;Lenovo EasyCamera; C:\Windows\system32\DRIVERS\rtsuvc.sys [2011-03-23 8199016]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-28 398896]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AIDA64Driver;FinalWire AIDA64 Kernel Driver; \??\F:\Programy\AIDA64\kerneld.x64 [2013-01-28 30624]
S3 bpenum;Intel(R) Centrino(R) WiMAX Enumerator; C:\Windows\system32\DRIVERS\bpenum.sys [2010-11-18 75264]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTWAMPFL;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-05-13 437288]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2011-05-13 150568]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2011-05-13 164392]
S3 BTWDPAN;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\btwdpan.sys [2011-05-13 89640]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-05-13 39976]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-05-13 21544]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-05-01 8593920]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-04-26 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2013-04-25 109056]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-04-26 57856]
S3 uxkx164;ASUS MyCinema DiBcom based digital tuner device; C:\Windows\system32\DRIVERS\uxkx164.sys [2008-10-28 694272]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2013-04-25 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AVP;Kaspersky Endpoint Security Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows\avp.exe [2013-01-20 729744]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-05-12 970016]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-05-12 884512]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-20 256904]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-03-22 279024]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-05-27 1431888]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-31 117144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-24 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Preventivní kontrola RSIT logu

#2 Příspěvek od vyosek »

Zdravim :)

Log vypada na havet v poradku :idea:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět