PC-HELP.CZ

Počítač naběhne do win a nereaguje po resetu vše OK. Prosím o kontrolu logu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by WulF at 2013-04-27 08:00:53
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 20 GB (7%) free of 300 GB
Total RAM: 8169 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:01:03, on 27.4.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files\Mouse\Amoumain.exe
C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Program Files\trend micro\WulF.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchou.com/?id=b0ea27170000000 ... 26831636e3
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [Google Update] "C:\Users\WulF\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [temp] C:\Users\WulF\AppData\Roaming\temp.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\WulF\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\WulF\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: InterCasino EUR - {9536DF30-CF04-4A89-B26B-4781E242230C} - http://www.intercasino.com/?utm_source= ... d-casino-l (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: InterCasino EUR - {9536DF30-CF04-4A89-B26B-4781E242230C} - http://www.intercasino.com/?utm_source= ... d-casino-l (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs:
O23 - Service: ABBYY FineReader 11 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.11.0) - ABBYY - C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 64-bit 64-bit (mi-raysat_3dsmax2010_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_64server.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11150 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x268
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_64server.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\SysWOW64\PnkBstrA.exe
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2128
"taskhost.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\SysWOW64\rundll32.exe" C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
"C:\Program Files\Mouse\Amoumain.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe" Minimum
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
HydraDM64.exe -h:66060 "Maximalizovat na celou plochu" "Maximalizovat k rohům okna" "Obnovit pracovní plochu"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"taskhost.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4016.0.600179002\2001791628" --supports-dual-gpus=false --gpu-vendor-id=0x1002 --gpu-device-id=0x6719 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/HQPUseCursorPosition/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4016.1.1412891875\252452998" /prefetch:3
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/HQPUseCursorPosition/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --instant-process --enable-threaded-compositing --channel="4016.9.1960805651\1840036663" /prefetch:3
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AutocompleteDynamicTrial_0/LiveSpellingExperiment/ForceCompositingMode/thread/InfiniteCache/No/NewMenuStyle/NewStyle/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPProhibitTrumpingInlineableResult/Standard/OmniboxHQPUseCursorPosition/HQPUseCursorPosition/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictor/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_23/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4016.13.1504897155\1833253598" /prefetch:3
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4016.14.156309712\882909800" --lang=cs --ignored=" --type=renderer " /prefetch:13
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\wuauclt.exe"
"C:\Users\WulF\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\WulF\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll" --lang=cs --channel="4016.15.793581969\1556701145" /prefetch:4
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\WulF\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
"C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" -classpath "C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" "-Djava.security.policy=file:C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy" -DtrustProxy=true -Xverify:remote "-Djnlpx.home=C:\\Program Files (x86)\\Java\\jre7\\bin" -Dsun.awt.warmup=true "-Xbootclasspath/a:C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar;C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar;C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" "-Djnlpx.jvm=C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" com.sun.javaws.Main -SSVBaselineUpdate

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-696496387-2281360345-2749245108-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-696496387-2281360345-2749245108-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-696496387-2281360345-2749245108-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-696496387-2281360345-2749245108-1000UA.job
C:\Windows\tasks\MagniPicUpdaterTask{AF8FF85E-26BB-4C9E-A4D0-C7AF905E6AD0}.job

=========Mozilla firefox=========

ProfilePath - C:\Users\WulF\AppData\Roaming\Mozilla\Firefox\Profiles\miip2z3k.default

prefs.js - "browser.startup.homepage" - "http://searchou.com/?id=b0ea27170000000000000026831636e3"
prefs.js - "keyword.URL" - ""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.110.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=1.138.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.3]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\WulF\AppData\Roaming\Mozilla\Firefox\Profiles\miip2z3k.default\extensions\
5061b241e68a6@5061b241e68e0.com
battlefieldheroespatcher@ea.com

C:\Users\WulF\AppData\Roaming\Mozilla\Firefox\Profiles\miip2z3k.default\searchplugins\
privitize.xml
SearchOnMe.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-10-21 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-10-21 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-19 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2010-10-27 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17 3855520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-19 155384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-02 11545192]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-10-27 613536]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-10-27 379040]
"Cm108Sound"=C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]
"WheelMouse"=C:\Program Files\Mouse\Amoumain.exe [2008-03-03 196608]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2013-03-21 6330568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe [2009-11-24 2642432]
"Google Update"=C:\Users\WulF\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-18 116648]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2011-10-16 393216]
"temp"=C:\Users\WulF\AppData\Roaming\temp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2010-11-15 35736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR11]
C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [2011-08-19 925960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boxoft Tools]
C:\ProgramData\Boxtools\Boxofttoolbox.exe [2010-11-19 2590208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish]
C:\Program Files (x86)\Clownfish\Clownfish.exe [2012-10-25 1226488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eType Setup403515.exe]
C:\Users\WulF\AppData\Local\Temp\eType Setup403515.exe /XML=C:\Users\WulF\AppData\Local\Temp\F8A.tmp /STP=0:1 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Livestation]
C:\Program Files (x86)\Livestation\Livestation.exe [2010-06-24 4657152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OscarEditor]
C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe [2009-11-24 2642432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [2012-04-19 336952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Companion]
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2011-12-07 433872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\MAFIA\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\temp]
C:\Users\WulF\AppData\Roaming\temp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader]
C:\Program Files\VDownloader\VDownloader.exe [2012-12-20 879104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 442880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^WulF^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^VDownloader.lnk]
C:\PROGRA~2\VDownloader\VDownloader.exe /silent []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\WulF\AppData\Local\Temp\temp_oikUBjHVeo\vbc.exe"="C:\Users\WulF\AppData\Local\Temp\temp_oikUBjHVeo\vbc.exe:*:Enabled:Windows Messanger"
"C:\Users\WulF\AppData\Local\Temp\temp_xaAmtAFHOF\vbc.exe"="C:\Users\WulF\AppData\Local\Temp\temp_xaAmtAFHOF\vbc.exe:*:Enabled:Windows Messanger"
"C:\Users\WulF\AppData\Local\Temp\temp_DSkSbVAurU\vbc.exe"="C:\Users\WulF\AppData\Local\Temp\temp_DSkSbVAurU\vbc.exe:*:Enabled:Windows Messanger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.HFYU"=huffyuv.dll
"VIDC.FPS1"=frapsv64.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.mjpg"=bdmjpeg64.dll
"vidc.mpeg"=bdmpegv64.dll
"msacm.bdmpeg"=bdmpega64.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 2 months======

2013-04-26 18:55:03 ----A---- C:\AdwCleaner[R3].txt
2013-04-26 18:48:15 ----A---- C:\Windows\ntbtlog.txt
2013-04-26 13:33:45 ----A---- C:\AdwCleaner[S2].txt
2013-04-26 13:33:12 ----A---- C:\AdwCleaner[R2].txt
2013-04-23 21:55:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-04-21 19:00:51 ----D---- C:\ProgramData\VS
2013-04-21 18:54:15 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-04-21 18:54:13 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-04-21 18:54:13 ----A---- C:\Windows\system32\elshyph.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-04-21 18:54:12 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\url.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-04-21 18:54:11 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\wininet.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\wextract.exe
2013-04-21 18:54:11 ----A---- C:\Windows\system32\webcheck.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\vbscript.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\urlmon.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\url.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-04-21 18:54:11 ----A---- C:\Windows\system32\pngfilt.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\occache.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\msrating.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\msls31.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\mshtmled.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\mshtml.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\msfeeds.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\licmgr10.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\jsproxy.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\inseng.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\iexpress.exe
2013-04-21 18:54:11 ----A---- C:\Windows\system32\ieUnatt.exe
2013-04-21 18:54:11 ----A---- C:\Windows\system32\iesetup.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\iertutil.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\iernonce.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\iedkcs32.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\ieapfltr.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\ieapfltr.dat
2013-04-21 18:54:11 ----A---- C:\Windows\system32\ie4uinit.exe
2013-04-21 18:54:11 ----A---- C:\Windows\system32\icardie.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\dxtrans.dll
2013-04-21 18:54:11 ----A---- C:\Windows\system32\dxtmsft.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-04-21 18:54:10 ----A---- C:\Windows\system32\mshtmler.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\mshta.exe
2013-04-21 18:54:10 ----A---- C:\Windows\system32\msfeedssync.exe
2013-04-21 18:54:10 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\jscript9.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\jscript.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\imgutil.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\ieui.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\iesysprep.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\iepeers.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\ieframe.dll
2013-04-21 18:54:10 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-04-21 18:47:16 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2013-04-21 18:47:16 ----A---- C:\Windows\system32\SQSRVRES.DLL
2013-04-21 18:47:16 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2013-04-21 18:46:08 ----D---- C:\Program Files\Microsoft.NET
2013-04-21 18:42:16 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-04-21 18:42:16 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-04-21 18:42:16 ----A---- C:\Windows\system32\UIAnimation.dll
2013-04-21 18:42:16 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-04-21 18:42:14 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-04-21 18:42:14 ----A---- C:\Windows\system32\WMPhoto.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-21 18:42:13 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-04-21 18:42:13 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\dxgi.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d11.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d10warp.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d10level9.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d10core.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-04-21 18:42:13 ----A---- C:\Windows\system32\d3d10_1.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-04-21 18:42:12 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\XpsPrint.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\FntCache.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\DWrite.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\d3d10.dll
2013-04-21 18:42:12 ----A---- C:\Windows\system32\d2d1.dll
2013-04-21 17:53:03 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-04-21 17:53:03 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-04-21 17:53:03 ----A---- C:\Windows\system32\Wpc.dll
2013-04-21 17:53:03 ----A---- C:\Windows\system32\gameux.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-04-21 17:52:45 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-04-21 17:52:45 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-04-21 17:52:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\wow64win.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\wow64cpu.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\wow64.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\ntvdm64.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\KernelBase.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\kernel32.dll
2013-04-21 17:52:45 ----A---- C:\Windows\system32\conhost.exe
2013-04-21 17:49:00 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-04-21 17:49:00 ----A---- C:\Windows\system32\usp10.dll
2013-04-21 17:48:58 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-04-21 17:48:57 ----A---- C:\Windows\system32\profsvc.dll
2013-04-21 17:48:40 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-04-21 17:48:38 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-04-20 15:35:23 ----D---- C:\Program Files (x86)\AC3Filter
2013-04-17 22:54:39 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-04-17 22:54:39 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-04-17 22:54:39 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-04-17 22:54:39 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-04-17 22:54:39 ----A---- C:\Windows\system32\winsrv.dll
2013-04-17 22:54:38 ----A---- C:\Windows\SYSWOW64\user.exe
2013-04-17 22:54:07 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-04-17 22:54:07 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-04-17 22:54:06 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-04-17 22:54:05 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-04-17 22:54:05 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-04-17 22:54:04 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-04-17 22:54:04 ----A---- C:\Windows\system32\smss.exe
2013-04-17 22:54:04 ----A---- C:\Windows\system32\csrsrv.dll
2013-04-17 22:53:38 ----A---- C:\Windows\system32\win32k.sys
2013-04-17 22:26:34 ----D---- C:\ProgramData\ESET
2013-04-16 21:15:28 ----D---- C:\Users\WulF\AppData\Roaming\Ufasoft
2013-04-16 16:11:31 ----D---- C:\ProgramData\Premium
2013-03-21 22:19:38 ----D---- C:\Program Files (x86)\RAR Password Unlocker
2013-03-21 06:10:18 ----A---- C:\Windows\SYSWOW64\xfcodec.dll
2013-03-21 06:10:16 ----A---- C:\Windows\system32\xfcodec64.dll
2013-03-13 20:21:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2013-03-10 13:20:10 ----D---- C:\Users\WulF\AppData\Roaming\Notepad++
2013-03-10 13:20:10 ----D---- C:\Program Files (x86)\Notepad++
2013-03-01 19:33:23 ----D---- C:\Program Files (x86)\Krtecek
2013-03-01 18:41:40 ----A---- C:\Windows\SYSWOW64\Amhooker.dll
2013-03-01 18:41:40 ----A---- C:\Windows\system32\drivers\Amusbx64.sys
2013-03-01 18:41:40 ----A---- C:\Windows\system32\drivers\Amps2x64.sys
2013-03-01 18:41:40 ----A---- C:\Windows\system32\drivers\Amfltx64.sys

======List of files/folders modified in the last 2 months======

2013-04-27 08:01:03 ----D---- C:\Windows\Prefetch
2013-04-27 08:00:59 ----D---- C:\Windows\Temp
2013-04-27 08:00:59 ----D---- C:\Program Files\trend micro
2013-04-27 07:57:33 ----D---- C:\Windows\system32\config
2013-04-26 19:52:07 ----SHD---- C:\System Volume Information
2013-04-26 18:48:15 ----D---- C:\Windows
2013-04-26 13:33:53 ----RD---- C:\Program Files (x86)
2013-04-26 13:33:52 ----HD---- C:\ProgramData
2013-04-26 06:25:58 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-04-25 22:53:02 ----D---- C:\Users\WulF\AppData\Roaming\Skype
2013-04-22 22:57:33 ----D---- C:\Program Files\VDownloader
2013-04-22 20:28:41 ----D---- C:\Users\WulF\AppData\Roaming\HLSW
2013-04-22 17:41:47 ----D---- C:\Windows\rescache
2013-04-22 16:39:08 ----D---- C:\Windows\Microsoft.NET
2013-04-22 16:22:08 ----RSD---- C:\Windows\assembly
2013-04-21 22:37:16 ----D---- C:\Windows\winsxs
2013-04-21 22:36:34 ----D---- C:\Windows\Panther
2013-04-21 22:35:05 ----SHD---- C:\Config.Msi
2013-04-21 22:33:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-04-21 22:33:39 ----D---- C:\Windows\system32\cs-CZ
2013-04-21 22:33:39 ----D---- C:\Program Files\Internet Explorer
2013-04-21 22:33:39 ----D---- C:\Program Files (x86)\Internet Explorer
2013-04-21 22:33:38 ----D---- C:\Windows\SYSWOW64\migration
2013-04-21 22:33:38 ----D---- C:\Windows\SYSWOW64\en-US
2013-04-21 22:33:38 ----D---- C:\Windows\SysWOW64
2013-04-21 22:33:36 ----D---- C:\Windows\system32\migration
2013-04-21 22:33:36 ----D---- C:\Windows\system32\en-US
2013-04-21 22:33:36 ----D---- C:\Windows\PolicyDefinitions
2013-04-21 22:33:35 ----D---- C:\Windows\System32
2013-04-21 22:33:34 ----D---- C:\Windows\system32\drivers
2013-04-21 22:33:34 ----D---- C:\Windows\AppPatch
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\it-IT
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-04-21 22:33:32 ----D---- C:\Windows\SYSWOW64\el-GR
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\es-ES
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\de-DE
2013-04-21 22:33:31 ----D---- C:\Windows\SYSWOW64\da-DK
2013-04-21 22:33:31 ----D---- C:\Windows\system32\zh-TW
2013-04-21 22:33:31 ----D---- C:\Windows\system32\zh-HK
2013-04-21 22:33:31 ----D---- C:\Windows\system32\zh-CN
2013-04-21 22:33:31 ----D---- C:\Windows\system32\tr-TR
2013-04-21 22:33:31 ----D---- C:\Windows\system32\sv-SE
2013-04-21 22:33:31 ----D---- C:\Windows\system32\pt-PT
2013-04-21 22:33:31 ----D---- C:\Windows\system32\pt-BR
2013-04-21 22:33:31 ----D---- C:\Windows\system32\pl-PL
2013-04-21 22:33:31 ----D---- C:\Windows\system32\nl-NL
2013-04-21 22:33:31 ----D---- C:\Windows\system32\ko-KR
2013-04-21 22:33:31 ----D---- C:\Windows\system32\it-IT
2013-04-21 22:33:31 ----D---- C:\Windows\system32\hu-HU
2013-04-21 22:33:31 ----D---- C:\Windows\system32\fr-FR
2013-04-21 22:33:31 ----D---- C:\Windows\system32\fi-FI
2013-04-21 22:33:31 ----D---- C:\Windows\system32\es-ES
2013-04-21 22:33:31 ----D---- C:\Windows\system32\el-GR
2013-04-21 22:33:31 ----D---- C:\Windows\system32\de-DE
2013-04-21 22:33:30 ----D---- C:\Windows\system32\ru-RU
2013-04-21 22:33:30 ----D---- C:\Windows\system32\nb-NO
2013-04-21 22:33:30 ----D---- C:\Windows\system32\ja-JP
2013-04-21 22:33:30 ----D---- C:\Windows\system32\da-DK
2013-04-21 22:33:29 ----D---- C:\Windows\system32\DriverStore
2013-04-21 22:00:57 ----D---- C:\Windows\inf
2013-04-21 22:00:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-21 19:18:25 ----SHD---- C:\Windows\Installer
2013-04-21 19:15:17 ----D---- C:\Program Files\MSBuild
2013-04-21 19:15:14 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-04-21 19:01:09 ----D---- C:\Program Files (x86)\Microsoft SDKs
2013-04-21 18:57:23 ----D---- C:\ProgramData\Microsoft Help
2013-04-21 18:56:58 ----D---- C:\Windows\Logs
2013-04-21 18:56:38 ----D---- C:\Windows\system32\catroot
2013-04-21 18:55:40 ----D---- C:\Windows\system32\catroot2
2013-04-21 18:50:10 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-04-21 18:46:08 ----RD---- C:\Program Files
2013-04-21 18:46:07 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-04-21 18:45:11 ----D---- C:\Program Files\Microsoft SQL Server
2013-04-21 18:45:11 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2013-04-21 12:49:08 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-04-21 04:51:18 ----D---- C:\Program Files (x86)\SpeedFan
2013-04-21 00:37:52 ----D---- C:\Users\WulF\AppData\Roaming\TS3Client
2013-04-18 20:43:35 ----D---- C:\ProgramData\Adobe
2013-04-18 20:37:23 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-04-17 23:38:02 ----D---- C:\Program Files\Microsoft Silverlight
2013-04-17 23:02:00 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-04-16 16:11:31 ----D---- C:\Windows\Tasks
2013-04-16 16:11:31 ----D---- C:\Windows\system32\Tasks
2013-04-14 15:01:26 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-04-14 15:01:26 ----A---- C:\Windows\system32\slwga.dll
2013-04-14 15:01:25 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-04-14 15:01:25 ----A---- C:\Windows\system32\user32.dll
2013-04-14 15:01:25 ----A---- C:\Windows\system32\systemcpl.dll
2013-04-13 23:45:05 ----D---- C:\Users\WulF\AppData\Roaming\Xfire
2013-04-13 12:30:30 ----D---- C:\ProgramData\Xfire
2013-04-12 16:32:25 ----A---- C:\Windows\Cm108.ini.imi
2013-04-08 14:15:10 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-04-04 07:21:59 ----D---- C:\Program Files (x86)\Xfire
2013-04-03 06:46:50 ----D---- C:\Windows\system32\wdi
2013-04-01 19:58:38 ----A---- C:\Windows\system32\MRT.exe
2013-03-26 17:26:11 ----D---- C:\Program Files (x86)\Origin
2013-03-22 19:39:50 ----D---- C:\Program Files (x86)\Google
2013-03-20 16:47:44 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2013-03-12 19:52:58 ----D---- C:\ProgramData\Skype
2013-03-12 19:52:55 ----RD---- C:\Program Files (x86)\Skype
2013-03-12 19:52:55 ----D---- C:\Program Files (x86)\Common Files
2013-03-12 01:10:56 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-01 18:41:46 ----D---- C:\Program Files\Mouse

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mv91xx;mv91xx; C:\Windows\system32\DRIVERS\mv91xx.sys [2010-08-27 297000]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2012-04-19 126912]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-01-10 139768]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-29 42696]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-10-27 38248]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-10-27 301680]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-10-27 31080]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-10-27 203624]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-10-27 58992]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-10-27 156520]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-10-27 279152]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-02 2536040]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248]
R3 USBPNPA;USB PnP Sound Device Interface; C:\Windows\system32\drivers\CM10864.sys [2009-12-22 1308160]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-29 310728]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-10-27 55336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-01-12 13352]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-01-12 27176]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-01-02 19456]
S3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys [2009-06-10 51712]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tizekdrv;tizekdrv; \??\C:\Users\WulF\AppData\Roaming\TZAC\tizek64.sys [2012-01-19 241848]
S3 tizeqdrv;tizeqdrv; \??\C:\Users\WulF\AppData\Roaming\TZAC2\tizeq64.sys [2012-08-19 171704]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-01-02 57856]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-10-27 52896]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-03-21 1341664]
R2 mi-raysat_3dsmax2010_64;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 64-bit 64-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_64server.exe [2009-03-12 86016]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-12-19 76888]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2673064]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-10 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-18 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-04-13 1030600]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-07-10 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-23 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-16 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------

Děkuji.

Dej sem log tz HijackThis (odkaz v podpise). V RSIT se nedá opravovat

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.