Zdravim nejdu mi tieto stranky ale ostatné idú v poriadku. Skúšal som prehliadače Chrome Firefox a IE a ani na jednom mi to nejde. Keď zadám www.google.sk tak mi napíše toto "Čas pripojenia vypršal. Server google.sk má príliš dlhú odozvu." A to isté aj na www.facebook.com. Včera som dal sken PC cez Eset našlo 36 virusov a väčšina bola toolbary a keď som ich vyliečil tak sa nerozbehli tiež tie stránky. Pripájam log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Notebook at 2014-01-06 17:08:34
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 1 GB (3%) free of 51 GB
Total RAM: 2943 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:09:30, on 6. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
G:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
G:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe
G:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 173.83.222.101 tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.gmail.com
O1 - Hosts: 173.83.222.101 gmail.com
O1 - Hosts: 173.83.222.101 www.hotmail.com
O1 - Hosts: 173.83.222.101 hotmail.com
O1 - Hosts: 173.83.222.101 www.mail.ru
O1 - Hosts: 173.83.222.101 mail.ru
O1 - Hosts: 173.83.222.101 www.torrentz.eu
O1 - Hosts: 173.83.222.101 torrentz.eu
O1 - Hosts: 173.83.222.101 www.kat.ph
O1 - Hosts: 173.83.222.101 kat.ph
O1 - Hosts: 173.83.222.101 www.thepiratebay.se
O1 - Hosts: 173.83.222.101 thepiratebay.se
O1 - Hosts: 173.83.222.101 www.thepiratebay.org
O1 - Hosts: 173.83.222.101 thepiratebay.org
O1 - Hosts: 173.83.222.101 www.ehow.com
O1 - Hosts: 173.83.222.101 ehow.com
O1 - Hosts: 173.83.222.101 www.imeetzu.com
O1 - Hosts: 173.83.222.101 imeetzu.com
O1 - Hosts: 173.83.222.101 www.omegle.com
O1 - Hosts: 173.83.222.101 omegle.com
O1 - Hosts: 173.83.222.101 www.runescape.com
O1 - Hosts: 173.83.222.101 runescape.com
O1 - Hosts: 173.83.222.101 google.com
O1 - Hosts: 173.83.222.101 www.google.com
O1 - Hosts: 173.83.222.101 leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.google.ae
O1 - Hosts: 173.83.222.101 www.google.com.af
O1 - Hosts: 173.83.222.101 www.google.com.ag
O1 - Hosts: 173.83.222.101 www.google.off.ai
O1 - Hosts: 173.83.222.101 www.google.am
O1 - Hosts: 173.83.222.101 www.google.com.ar
O1 - Hosts: 173.83.222.101 www.google.as
O1 - Hosts: 173.83.222.101 www.google.at
O1 - Hosts: 173.83.222.101 www.google.com.au
O1 - Hosts: 173.83.222.101 www.google.az
O1 - Hosts: 173.83.222.101 www.google.ba
O1 - Hosts: 173.83.222.101 www.google.com.bd
O1 - Hosts: 173.83.222.101 www.google.be
O1 - Hosts: 173.83.222.101 www.google.bg
O1 - Hosts: 173.83.222.101 www.google.com.bh
O1 - Hosts: 173.83.222.101 www.google.bi
O1 - Hosts: 173.83.222.101 www.google.com.bo
O1 - Hosts: 173.83.222.101 www.google.com.br
O1 - Hosts: 173.83.222.101 www.google.bs
O1 - Hosts: 173.83.222.101 www.google.co.bw
O1 - Hosts: 173.83.222.101 www.google.com.bz
O1 - Hosts: 173.83.222.101 www.google.ca
O1 - Hosts: 173.83.222.101 www.google.cd
O1 - Hosts: 173.83.222.101 www.google.cg
O1 - Hosts: 173.83.222.101 www.google.ch
O1 - Hosts: 173.83.222.101 www.google.ci
O1 - Hosts: 173.83.222.101 www.google.co.ck
O1 - Hosts: 173.83.222.101 www.google.cl
O1 - Hosts: 173.83.222.101 www.google.cn
O1 - Hosts: 173.83.222.101 www.google.com.co
O1 - Hosts: 173.83.222.101 www.google.co.cr
O1 - Hosts: 173.83.222.101 www.google.com.cu
O1 - Hosts: 173.83.222.101 www.google.cz
O1 - Hosts: 173.83.222.101 www.google.de
O1 - Hosts: 173.83.222.101 www.google.dj
O1 - Hosts: 173.83.222.101 www.google.dk
O1 - Hosts: 173.83.222.101 www.google.dm
O1 - Hosts: 173.83.222.101 www.google.com.do
O1 - Hosts: 173.83.222.101 www.google.com.ec
O1 - Hosts: 173.83.222.101 www.google.ee
O1 - Hosts: 173.83.222.101 www.google.com.eg
O1 - Hosts: 173.83.222.101 www.google.es
O1 - Hosts: 173.83.222.101 www.google.com.et
O1 - Hosts: 173.83.222.101 www.google.fi
O1 - Hosts: 173.83.222.101 www.google.com.fj
O1 - Hosts: 173.83.222.101 www.google.fm
O1 - Hosts: 173.83.222.101 www.google.fr
O1 - Hosts: 173.83.222.101 www.google.ge
O1 - Hosts: 173.83.222.101 www.google.gg
O1 - Hosts: 173.83.222.101 www.google.com.gi
O1 - Hosts: 173.83.222.101 www.google.gl
O1 - Hosts: 173.83.222.101 www.google.gm
O1 - Hosts: 173.83.222.101 www.google.gr
O1 - Hosts: 173.83.222.101 www.google.com.gt
O1 - Hosts: 173.83.222.101 www.google.gy
O1 - Hosts: 173.83.222.101 www.google.com.hk
O1 - Hosts: 173.83.222.101 www.google.hn
O1 - Hosts: 173.83.222.101 www.google.hr
O1 - Hosts: 173.83.222.101 www.google.ht
O1 - Hosts: 173.83.222.101 www.google.hu
O1 - Hosts: 173.83.222.101 www.google.co.id
O1 - Hosts: 173.83.222.101 www.google.ie
O1 - Hosts: 173.83.222.101 www.google.co.il
O1 - Hosts: 173.83.222.101 www.google.co.im
O1 - Hosts: 173.83.222.101 www.google.co.in
O1 - Hosts: 173.83.222.101 www.google.is
O1 - Hosts: 173.83.222.101 www.google.it
O1 - Hosts: 173.83.222.101 www.google.co.je
O1 - Hosts: 173.83.222.101 www.google.com.jm
O1 - Hosts: 173.83.222.101 www.google.jo
O1 - Hosts: 173.83.222.101 www.google.co.jp
O1 - Hosts: 173.83.222.101 www.google.co.ke
O1 - Hosts: 173.83.222.101 www.google.kg
O2 - BHO: CrossriderApp0034362 - {11111111-1111-1111-1111-110311431162} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Facebook Messenger.lnk = Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Blue Coat K9 Web Protection (bckwfs) - Blue Coat Systems, Inc. - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14719 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Ati2evxx.exe -Client
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
szndesktop.exe default start
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "45777057216939981511091582735-608140348185866718153103900015278878391688274379
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
"C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Notebook\Desktop\Ja\Hudba\04---Lucie-Vondráčková---Zombie.mp3"
"G:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe" updateandrun lol_launcher LoLLauncher.exe
LoLLauncher.exe
"G:/Riot Games/League of Legends/RADS/projects/lol_air_client/releases/0.0.1.64/deploy/LolClient.exe" -runtime .\ -nodebug META-INF\AIR\application.xml .\ -- 8393
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2412.10a39100.417787735 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2412 "\\.\pipe\gecko-crash-server-pipe.2412" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash3328.6B69B990.10385 --host-broker-channel=Flash3328.6B69B990.19924 --host-pid=3328 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=4368.0043F698.2021174811 --proxy-stub-channel=Flash3328.6B69B990.10385 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 24AE7964-128B-A3D6-B977-0AEC154F1D26 -Reinvoke
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-10-09 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}]
MinibarBHO - C:\Program Files (x86)\Minibar\Minibar.dll [2013-02-26 331264]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"SkyDrive"=C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-24 257136]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Messenger.lnk - C:\Users\Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-01-06 17:08:36 ----D---- C:\Program Files\trend micro
2014-01-06 17:08:34 ----D---- C:\rsit
2014-01-04 13:22:19 ----D---- C:\Users\Notebook\AppData\Roaming\Boolat Games
2014-01-03 09:30:34 ----D---- C:\Users\Notebook\AppData\Roaming\Building the Great Wall of China
2014-01-02 14:05:07 ----ASH---- C:\pagefile.sys
2014-01-02 13:03:56 ----D---- C:\Program Files\CCleaner
2013-12-31 22:21:14 ----D---- C:\Users\Notebook\AppData\Roaming\Rovio
2013-12-31 18:44:27 ----D---- C:\Users\Notebook\AppData\Roaming\ESET
2013-12-31 18:42:16 ----D---- C:\ProgramData\ESET
2013-12-31 18:42:16 ----D---- C:\Program Files\ESET
2013-12-31 09:41:13 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-12-30 13:55:20 ----D---- C:\Games
2013-12-26 19:40:25 ----D---- C:\ProgramData\Reflexive
2013-12-26 19:39:25 ----D---- C:\Program Files (x86)\ReflexiveArcade
2013-12-26 14:48:43 ----D---- C:\Program Files (x86)\Vertrix 2
2013-12-24 08:14:39 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-12-20 21:00:14 ----D---- C:\Users\Notebook\AppData\Roaming\MythPeople
2013-12-20 12:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 16:10:35 ----D---- C:\Windows\rescache
2013-12-11 22:01:53 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 22:01:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 22:01:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 22:01:46 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 21:59:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 21:59:05 ----A---- C:\Windows\system32\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iesetup.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iernonce.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-11 21:59:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-11 21:59:01 ----A---- C:\Windows\system32\mshtml.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-11 21:58:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-11 21:58:58 ----A---- C:\Windows\system32\iertutil.dll
2013-12-11 21:58:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-11 21:58:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-11 21:58:56 ----A---- C:\Windows\system32\wininet.dll
2013-12-11 21:58:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-11 21:58:55 ----A---- C:\Windows\system32\urlmon.dll
2013-12-11 21:58:53 ----A---- C:\Windows\system32\ieframe.dll
2013-12-11 21:58:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-11 21:58:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-11 21:58:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-11 21:58:47 ----A---- C:\Windows\system32\jscript9.dll
2013-12-11 14:06:14 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 14:06:14 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 14:05:47 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 14:05:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 14:05:19 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 14:04:49 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 14:04:49 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 14:04:39 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 14:04:39 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 14:03:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 14:03:25 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 14:03:25 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\system32\wscript.exe
======List of files/folders modified in the last 1 months======
2014-01-06 17:09:03 ----D---- C:\Windows\Temp
2014-01-06 17:08:36 ----RD---- C:\Program Files
2014-01-06 10:38:23 ----D---- C:\ProgramData\AlawarWrapper
2014-01-06 10:23:42 ----D---- C:\Windows\system32\config
2014-01-05 23:15:40 ----D---- C:\Program Files (x86)\hdvidcodec.com
2014-01-05 23:15:35 ----D---- C:\Program Files (x86)\HDvid Codec V1
2014-01-05 22:33:05 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-01-05 22:29:36 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-01-05 12:41:06 ----SHD---- C:\System Volume Information
2014-01-05 10:59:08 ----D---- C:\Program Files (x86)\Alawarhry.cz
2014-01-04 17:12:24 ----D---- C:\Windows\System32
2014-01-04 17:12:24 ----D---- C:\Windows\inf
2014-01-04 17:12:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-02 13:18:02 ----D---- C:\Windows
2014-01-02 13:14:39 ----D---- C:\Users\Notebook\AppData\Roaming\DAEMON Tools Lite
2014-01-02 13:14:15 ----D---- C:\Windows\Panther
2014-01-02 13:14:15 ----D---- C:\Windows\ModemLogs
2014-01-02 13:14:14 ----D---- C:\Windows\Logs
2014-01-02 13:14:14 ----D---- C:\Windows\debug
2014-01-02 13:04:02 ----D---- C:\Windows\system32\Tasks
2014-01-01 09:43:25 ----SHD---- C:\Windows\Installer
2014-01-01 09:43:06 ----RD---- C:\Program Files (x86)
2013-12-31 18:43:41 ----D---- C:\Windows\system32\drivers
2013-12-31 18:43:40 ----D---- C:\Windows\system32\DriverStore
2013-12-31 18:43:40 ----D---- C:\Windows\system32\catroot
2013-12-31 18:42:16 ----HD---- C:\ProgramData
2013-12-31 10:00:59 ----D---- C:\ProgramData\AVAST Software
2013-12-31 09:41:13 ----D---- C:\Windows\SysWOW64
2013-12-31 09:25:39 ----D---- C:\Windows\system32\NDF
2013-12-30 14:55:03 ----D---- C:\ProgramData\WebcamMax
2013-12-28 11:06:01 ----D---- C:\ProgramData\Playrix Entertainment
2013-12-25 15:59:54 ----D---- C:\Windows\Prefetch
2013-12-24 08:26:03 ----D---- C:\Windows\winsxs
2013-12-20 21:04:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-19 22:10:48 ----D---- C:\Windows\system32\catroot2
2013-12-14 22:17:49 ----D---- C:\Windows\system32\MRT
2013-12-14 22:15:08 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 13:23:32 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-12 13:23:31 ----D---- C:\Program Files\Windows Media Player
2013-12-12 13:23:29 ----D---- C:\Program Files\Internet Explorer
2013-12-12 13:23:29 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-12 13:23:26 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-12-12 13:23:26 ----D---- C:\Windows\system32\sk-SK
2013-12-11 22:01:19 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 14:57:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-07-30 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 bckd;bckd; C:\Windows\system32\drivers\bckd.sys [2013-03-01 127216]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-11 1208320]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-23 1579520]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 5352960]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4065296]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 246376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 676968]
S1 vdrv8000;vdrv8000; C:\Windows\System32\Drivers\VDRV8000.SYS [2006-06-20 139264]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 HHCDHelp.sys;HHCDHelp.sys; \??\C:\Windows\system32\drivers\HHCDHelp.sys [2005-12-21 17408]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;avast! SecureLine TAP Adapter; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-30 40616]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 vcd8bus;Virtual CD v8 Bus Enumerator; C:\Windows\system32\DRIVERS\vcd8bus.sys [2006-01-27 33280]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 952320]
R2 bckwfs;Blue Coat K9 Web Protection; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2013-03-01 2649840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 VC8SecS;Virtual CD v8 Management Service; C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe [2006-09-01 109688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-11 1255736]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Nejdu stranky google.sk a facebook.com
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119400
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Nejdu stranky google.sk a facebook.com
Zdravím!
Spusťte nejprve tuto utiltu:
Spusťte nejprve tuto utiltu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Nejdu stranky google.sk a facebook.com
# AdwCleaner v3.016 - Report created 06/01/2014 at 21:04:46
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Notebook - NOTEBOOK-PC
# Running from : C:\Users\Notebook\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Alawar
Folder Deleted : C:\ProgramData\Alawar Stargaze
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\Crawler
Folder Deleted : C:\Program Files (x86)\driver-soft
Folder Deleted : C:\Program Files (x86)\HDvidCodec.com
Folder Deleted : C:\Program Files (x86)\Minibar
Folder Deleted : C:\Program Files (x86)\HDvid Codec V1
Folder Deleted : C:\Users\Notebook\AppData\Local\Minibar
Folder Deleted : C:\Users\Notebook\AppData\Local\webplayer
Folder Deleted : C:\Users\Notebook\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Notebook\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\Notebook\AppData\Roaming\Alawar
Folder Deleted : C:\Users\Notebook\AppData\Roaming\Alawar Stargaze
Folder Deleted : C:\Users\miro\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\miro\AppData\Local\Temp\apn
Folder Deleted : C:\Users\miro\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\miro\AppData\Roaming\Alawar Stargaze
Folder Deleted : C:\Users\miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\plugin2@gameplaylabs.com
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\staged
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{ba23dafc-5a36-4bdd-9d69-ed60da9d6c78}
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
Folder Deleted : C:\Users\miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\hdvc3@hdvidcodec.com.xpi
File Deleted : C:\Users\miro\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\miro\Desktop\HDVidCodec.lnk
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\defaulttab.config
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\searchplugins\Search_Results.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\searchplugins\search-here.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\searchplugins\SweetIm.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\searchplugins\SweetIm.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\user.js
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\user.js
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435562}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436662}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434462}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21d59046-8568-4e51-bd32-79bd751dcce6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{499b15ac-881f-4224-9373-e2af2d95108b}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c2a9ed0-361d-4678-bbb6-fa668315952d}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82fe22f6-6581-4ed3-b962-d0114cfc8f04}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a178fe10-2662-4286-93ab-0477a425a351}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435562}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436662}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\HDvid Codec V1
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\HDvid Codec V1
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V1
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (sk)
[ File : C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\ets4m34b.default-1388778585055\prefs.js ]
[ File : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\prefs.js ]
Line Deleted : user_pref("extensions.Softonic.admin", false);
Line Deleted : user_pref("extensions.Softonic.aflt", "SD");
Line Deleted : user_pref("extensions.Softonic.autoRvrt", "false");
Line Deleted : user_pref("extensions.Softonic.cntry", "SK");
Line Deleted : user_pref("extensions.Softonic.cv", "cv5");
Line Deleted : user_pref("extensions.Softonic.dfltLng", "pl");
Line Deleted : user_pref("extensions.Softonic.envrmnt", "production");
Line Deleted : user_pref("extensions.Softonic.excTlbr", false);
Line Deleted : user_pref("extensions.Softonic.hdrMd5", "518816B1495CC154DD3A78D566E262D3");
Line Deleted : user_pref("extensions.Softonic.hmpg", false);
Line Deleted : user_pref("extensions.Softonic.id", "a6da08be000000000000020021da4739");
Line Deleted : user_pref("extensions.Softonic.instlDay", "15636");
Line Deleted : user_pref("extensions.Softonic.instlRef", "MON00084");
Line Deleted : user_pref("extensions.Softonic.isdcmntcmplt", true);
Line Deleted : user_pref("extensions.Softonic.lastVrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("extensions.Softonic.mntrvrsn", "1.3.0");
Line Deleted : user_pref("extensions.Softonic.newTab", false);
Line Deleted : user_pref("extensions.Softonic.prdct", "Softonic");
Line Deleted : user_pref("extensions.Softonic.prtnrId", "softonic");
Line Deleted : user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search settings, Click No to restore original settings");
Line Deleted : user_pref("extensions.Softonic.sg", "az");
Line Deleted : user_pref("extensions.Softonic.smplGrp", "none");
Line Deleted : user_pref("extensions.Softonic.tlbrId", "base");
Line Deleted : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00084/tb_v1?SearchSource=1&cc=&q=");
Line Deleted : user_pref("extensions.Softonic.vrsn", "1.6.7.4");
Line Deleted : user_pref("extensions.Softonic.vrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("extensions.Softonic.vrsni", "1.6.7.4");
Line Deleted : user_pref("extensions.Softonic_i.newTab", false);
Line Deleted : user_pref("extensions.Softonic_i.smplGrp", "none");
Line Deleted : user_pref("extensions.Softonic_i.vrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("keyword.URL", "hxxp://www2.inbox.com/search/dispatcher.aspx?tp=sf&tbid=82120&language=sk&qkw=");
[ File : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "SweetIM Search");
Line Deleted : user_pref("browser.search.order.1", "Search Results");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1301142781");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1301142784");
Line Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Line Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search Results");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.sweetim.com/search.asp?src=2&q=");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://google.sk/");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
Line Deleted : user_pref("sweetim.toolbar.search.history", "satelitn%C3%A9%20komponenty");
Line Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Line Deleted : user_pref("sweetim.toolbar.simapp_id", "{9FD2DCF5-94F1-4731-BDA6-CF6E7EE4A490}");
Line Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000&barid={AB928E25-DE9C-4645-BD3E-75F5572959FA}");
Line Deleted : user_pref("sweetim.toolbar.version", "1.0.0.10");
-\\ Google Chrome v31.0.1650.63
[ File : C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\miro\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [17059 octets] - [06/01/2014 21:03:28]
AdwCleaner[S0].txt - [15874 octets] - [06/01/2014 21:04:46]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15935 octets] ##########
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Notebook - NOTEBOOK-PC
# Running from : C:\Users\Notebook\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Alawar
Folder Deleted : C:\ProgramData\Alawar Stargaze
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\Crawler
Folder Deleted : C:\Program Files (x86)\driver-soft
Folder Deleted : C:\Program Files (x86)\HDvidCodec.com
Folder Deleted : C:\Program Files (x86)\Minibar
Folder Deleted : C:\Program Files (x86)\HDvid Codec V1
Folder Deleted : C:\Users\Notebook\AppData\Local\Minibar
Folder Deleted : C:\Users\Notebook\AppData\Local\webplayer
Folder Deleted : C:\Users\Notebook\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Notebook\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\Notebook\AppData\Roaming\Alawar
Folder Deleted : C:\Users\Notebook\AppData\Roaming\Alawar Stargaze
Folder Deleted : C:\Users\miro\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\miro\AppData\Local\Temp\apn
Folder Deleted : C:\Users\miro\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\miro\AppData\Roaming\Alawar Stargaze
Folder Deleted : C:\Users\miro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\plugin2@gameplaylabs.com
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\staged
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{ba23dafc-5a36-4bdd-9d69-ed60da9d6c78}
Folder Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
Folder Deleted : C:\Users\miro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\Extensions\hdvc3@hdvidcodec.com.xpi
File Deleted : C:\Users\miro\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\miro\Desktop\HDVidCodec.lnk
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\defaulttab.config
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\searchplugins\Search_Results.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\searchplugins\search-here.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\searchplugins\SweetIm.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\searchplugins\SweetIm.xml
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\user.js
File Deleted : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\user.js
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0034362.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435562}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436662}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434462}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBF1B8D2-9A06-4174-A8B5-E38606DDB92B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21d59046-8568-4e51-bd32-79bd751dcce6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{499b15ac-881f-4224-9373-e2af2d95108b}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c2a9ed0-361d-4678-bbb6-fa668315952d}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82fe22f6-6581-4ed3-b962-d0114cfc8f04}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a178fe10-2662-4286-93ab-0477a425a351}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435562}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436662}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\HDvid Codec V1
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\HDvid Codec V1
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V1
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (sk)
[ File : C:\Users\Notebook\AppData\Roaming\Mozilla\Firefox\Profiles\ets4m34b.default-1388778585055\prefs.js ]
[ File : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\6msayt7j.default-1340988968393\prefs.js ]
Line Deleted : user_pref("extensions.Softonic.admin", false);
Line Deleted : user_pref("extensions.Softonic.aflt", "SD");
Line Deleted : user_pref("extensions.Softonic.autoRvrt", "false");
Line Deleted : user_pref("extensions.Softonic.cntry", "SK");
Line Deleted : user_pref("extensions.Softonic.cv", "cv5");
Line Deleted : user_pref("extensions.Softonic.dfltLng", "pl");
Line Deleted : user_pref("extensions.Softonic.envrmnt", "production");
Line Deleted : user_pref("extensions.Softonic.excTlbr", false);
Line Deleted : user_pref("extensions.Softonic.hdrMd5", "518816B1495CC154DD3A78D566E262D3");
Line Deleted : user_pref("extensions.Softonic.hmpg", false);
Line Deleted : user_pref("extensions.Softonic.id", "a6da08be000000000000020021da4739");
Line Deleted : user_pref("extensions.Softonic.instlDay", "15636");
Line Deleted : user_pref("extensions.Softonic.instlRef", "MON00084");
Line Deleted : user_pref("extensions.Softonic.isdcmntcmplt", true);
Line Deleted : user_pref("extensions.Softonic.lastVrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("extensions.Softonic.mntrvrsn", "1.3.0");
Line Deleted : user_pref("extensions.Softonic.newTab", false);
Line Deleted : user_pref("extensions.Softonic.prdct", "Softonic");
Line Deleted : user_pref("extensions.Softonic.prtnrId", "softonic");
Line Deleted : user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search settings, Click No to restore original settings");
Line Deleted : user_pref("extensions.Softonic.sg", "az");
Line Deleted : user_pref("extensions.Softonic.smplGrp", "none");
Line Deleted : user_pref("extensions.Softonic.tlbrId", "base");
Line Deleted : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00084/tb_v1?SearchSource=1&cc=&q=");
Line Deleted : user_pref("extensions.Softonic.vrsn", "1.6.7.4");
Line Deleted : user_pref("extensions.Softonic.vrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("extensions.Softonic.vrsni", "1.6.7.4");
Line Deleted : user_pref("extensions.Softonic_i.newTab", false);
Line Deleted : user_pref("extensions.Softonic_i.smplGrp", "none");
Line Deleted : user_pref("extensions.Softonic_i.vrsnTs", "1.6.7.413:28:00");
Line Deleted : user_pref("keyword.URL", "hxxp://www2.inbox.com/search/dispatcher.aspx?tp=sf&tbid=82120&language=sk&qkw=");
[ File : C:\Users\miro\AppData\Roaming\Mozilla\Firefox\Profiles\rz6o2t9y.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "SweetIM Search");
Line Deleted : user_pref("browser.search.order.1", "Search Results");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1301142781");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1301142784");
Line Deleted : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1301142784");
Line Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Line Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search Results");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.sweetim.com/search.asp?src=2&q=");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://google.sk/");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
Line Deleted : user_pref("sweetim.toolbar.search.history", "satelitn%C3%A9%20komponenty");
Line Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Line Deleted : user_pref("sweetim.toolbar.simapp_id", "{9FD2DCF5-94F1-4731-BDA6-CF6E7EE4A490}");
Line Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000&barid={AB928E25-DE9C-4645-BD3E-75F5572959FA}");
Line Deleted : user_pref("sweetim.toolbar.version", "1.0.0.10");
-\\ Google Chrome v31.0.1650.63
[ File : C:\Users\Notebook\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Users\miro\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [17059 octets] - [06/01/2014 21:03:28]
AdwCleaner[S0].txt - [15874 octets] - [06/01/2014 21:04:46]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15935 octets] ##########
-
Rudy
- Site Admin
- Příspěvky: 119400
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Nejdu stranky google.sk a facebook.com
Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Nejdu stranky google.sk a facebook.com
Logfile of random's system information tool 1.08 (written by random/random)
Run by Notebook at 2014-01-07 11:25:49
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 2 GB (3%) free of 51 GB
Total RAM: 2943 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:26:02, on 7. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 173.83.222.101 tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.gmail.com
O1 - Hosts: 173.83.222.101 gmail.com
O1 - Hosts: 173.83.222.101 www.hotmail.com
O1 - Hosts: 173.83.222.101 hotmail.com
O1 - Hosts: 173.83.222.101 www.mail.ru
O1 - Hosts: 173.83.222.101 mail.ru
O1 - Hosts: 173.83.222.101 www.torrentz.eu
O1 - Hosts: 173.83.222.101 torrentz.eu
O1 - Hosts: 173.83.222.101 www.kat.ph
O1 - Hosts: 173.83.222.101 kat.ph
O1 - Hosts: 173.83.222.101 www.thepiratebay.se
O1 - Hosts: 173.83.222.101 thepiratebay.se
O1 - Hosts: 173.83.222.101 www.thepiratebay.org
O1 - Hosts: 173.83.222.101 thepiratebay.org
O1 - Hosts: 173.83.222.101 www.ehow.com
O1 - Hosts: 173.83.222.101 ehow.com
O1 - Hosts: 173.83.222.101 www.imeetzu.com
O1 - Hosts: 173.83.222.101 imeetzu.com
O1 - Hosts: 173.83.222.101 www.omegle.com
O1 - Hosts: 173.83.222.101 omegle.com
O1 - Hosts: 173.83.222.101 www.runescape.com
O1 - Hosts: 173.83.222.101 runescape.com
O1 - Hosts: 173.83.222.101 google.com
O1 - Hosts: 173.83.222.101 www.google.com
O1 - Hosts: 173.83.222.101 leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.google.ae
O1 - Hosts: 173.83.222.101 www.google.com.af
O1 - Hosts: 173.83.222.101 www.google.com.ag
O1 - Hosts: 173.83.222.101 www.google.off.ai
O1 - Hosts: 173.83.222.101 www.google.am
O1 - Hosts: 173.83.222.101 www.google.com.ar
O1 - Hosts: 173.83.222.101 www.google.as
O1 - Hosts: 173.83.222.101 www.google.at
O1 - Hosts: 173.83.222.101 www.google.com.au
O1 - Hosts: 173.83.222.101 www.google.az
O1 - Hosts: 173.83.222.101 www.google.ba
O1 - Hosts: 173.83.222.101 www.google.com.bd
O1 - Hosts: 173.83.222.101 www.google.be
O1 - Hosts: 173.83.222.101 www.google.bg
O1 - Hosts: 173.83.222.101 www.google.com.bh
O1 - Hosts: 173.83.222.101 www.google.bi
O1 - Hosts: 173.83.222.101 www.google.com.bo
O1 - Hosts: 173.83.222.101 www.google.com.br
O1 - Hosts: 173.83.222.101 www.google.bs
O1 - Hosts: 173.83.222.101 www.google.co.bw
O1 - Hosts: 173.83.222.101 www.google.com.bz
O1 - Hosts: 173.83.222.101 www.google.ca
O1 - Hosts: 173.83.222.101 www.google.cd
O1 - Hosts: 173.83.222.101 www.google.cg
O1 - Hosts: 173.83.222.101 www.google.ch
O1 - Hosts: 173.83.222.101 www.google.ci
O1 - Hosts: 173.83.222.101 www.google.co.ck
O1 - Hosts: 173.83.222.101 www.google.cl
O1 - Hosts: 173.83.222.101 www.google.cn
O1 - Hosts: 173.83.222.101 www.google.com.co
O1 - Hosts: 173.83.222.101 www.google.co.cr
O1 - Hosts: 173.83.222.101 www.google.com.cu
O1 - Hosts: 173.83.222.101 www.google.cz
O1 - Hosts: 173.83.222.101 www.google.de
O1 - Hosts: 173.83.222.101 www.google.dj
O1 - Hosts: 173.83.222.101 www.google.dk
O1 - Hosts: 173.83.222.101 www.google.dm
O1 - Hosts: 173.83.222.101 www.google.com.do
O1 - Hosts: 173.83.222.101 www.google.com.ec
O1 - Hosts: 173.83.222.101 www.google.ee
O1 - Hosts: 173.83.222.101 www.google.com.eg
O1 - Hosts: 173.83.222.101 www.google.es
O1 - Hosts: 173.83.222.101 www.google.com.et
O1 - Hosts: 173.83.222.101 www.google.fi
O1 - Hosts: 173.83.222.101 www.google.com.fj
O1 - Hosts: 173.83.222.101 www.google.fm
O1 - Hosts: 173.83.222.101 www.google.fr
O1 - Hosts: 173.83.222.101 www.google.ge
O1 - Hosts: 173.83.222.101 www.google.gg
O1 - Hosts: 173.83.222.101 www.google.com.gi
O1 - Hosts: 173.83.222.101 www.google.gl
O1 - Hosts: 173.83.222.101 www.google.gm
O1 - Hosts: 173.83.222.101 www.google.gr
O1 - Hosts: 173.83.222.101 www.google.com.gt
O1 - Hosts: 173.83.222.101 www.google.gy
O1 - Hosts: 173.83.222.101 www.google.com.hk
O1 - Hosts: 173.83.222.101 www.google.hn
O1 - Hosts: 173.83.222.101 www.google.hr
O1 - Hosts: 173.83.222.101 www.google.ht
O1 - Hosts: 173.83.222.101 www.google.hu
O1 - Hosts: 173.83.222.101 www.google.co.id
O1 - Hosts: 173.83.222.101 www.google.ie
O1 - Hosts: 173.83.222.101 www.google.co.il
O1 - Hosts: 173.83.222.101 www.google.co.im
O1 - Hosts: 173.83.222.101 www.google.co.in
O1 - Hosts: 173.83.222.101 www.google.is
O1 - Hosts: 173.83.222.101 www.google.it
O1 - Hosts: 173.83.222.101 www.google.co.je
O1 - Hosts: 173.83.222.101 www.google.com.jm
O1 - Hosts: 173.83.222.101 www.google.jo
O1 - Hosts: 173.83.222.101 www.google.co.jp
O1 - Hosts: 173.83.222.101 www.google.co.ke
O1 - Hosts: 173.83.222.101 www.google.kg
O2 - BHO: CrossriderApp0034362 - {11111111-1111-1111-1111-110311431162} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Facebook Messenger.lnk = Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Blue Coat K9 Web Protection (bckwfs) - Blue Coat Systems, Inc. - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14015 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
Ati2evxx.exe -Client
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
szndesktop.exe default start
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-1756235419-1846528497750837056362831475-85974988492988472682557183-225946432
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3204.10553a00.839642062 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3204 "\\.\pipe\gecko-crash-server-pipe.3204" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash2868.6720B990.25793 --host-broker-channel=Flash2868.6720B990.31678 --host-pid=2868 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=4288.0016F6DC.795602925 --proxy-stub-channel=Flash2868.6720B990.25793 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"SkyDrive"=C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-24 257136]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Messenger.lnk - C:\Users\Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-01-06 18:20:41 ----D---- C:\AdwCleaner
2014-01-06 17:08:36 ----D---- C:\Program Files\trend micro
2014-01-06 17:08:34 ----D---- C:\rsit
2014-01-04 13:22:19 ----D---- C:\Users\Notebook\AppData\Roaming\Boolat Games
2014-01-03 09:30:34 ----D---- C:\Users\Notebook\AppData\Roaming\Building the Great Wall of China
2014-01-02 14:05:07 ----ASH---- C:\pagefile.sys
2014-01-02 13:03:56 ----D---- C:\Program Files\CCleaner
2013-12-31 22:21:14 ----D---- C:\Users\Notebook\AppData\Roaming\Rovio
2013-12-31 18:44:27 ----D---- C:\Users\Notebook\AppData\Roaming\ESET
2013-12-31 18:42:16 ----D---- C:\ProgramData\ESET
2013-12-31 18:42:16 ----D---- C:\Program Files\ESET
2013-12-31 09:41:13 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-12-30 13:55:20 ----D---- C:\Games
2013-12-26 19:40:25 ----D---- C:\ProgramData\Reflexive
2013-12-26 19:39:25 ----D---- C:\Program Files (x86)\ReflexiveArcade
2013-12-26 14:48:43 ----D---- C:\Program Files (x86)\Vertrix 2
2013-12-24 08:14:39 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-12-20 21:00:14 ----D---- C:\Users\Notebook\AppData\Roaming\MythPeople
2013-12-20 12:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 16:10:35 ----D---- C:\Windows\rescache
2013-12-11 22:01:53 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 22:01:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 22:01:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 22:01:46 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 21:59:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 21:59:05 ----A---- C:\Windows\system32\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iesetup.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iernonce.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-11 21:59:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-11 21:59:01 ----A---- C:\Windows\system32\mshtml.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-11 21:58:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-11 21:58:58 ----A---- C:\Windows\system32\iertutil.dll
2013-12-11 21:58:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-11 21:58:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-11 21:58:56 ----A---- C:\Windows\system32\wininet.dll
2013-12-11 21:58:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-11 21:58:55 ----A---- C:\Windows\system32\urlmon.dll
2013-12-11 21:58:53 ----A---- C:\Windows\system32\ieframe.dll
2013-12-11 21:58:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-11 21:58:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-11 21:58:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-11 21:58:47 ----A---- C:\Windows\system32\jscript9.dll
2013-12-11 14:06:14 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 14:06:14 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 14:05:47 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 14:05:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 14:05:19 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 14:04:49 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 14:04:49 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 14:04:39 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 14:04:39 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 14:03:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 14:03:25 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 14:03:25 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\system32\wscript.exe
======List of files/folders modified in the last 1 months======
2014-01-07 11:25:55 ----D---- C:\Windows\Temp
2014-01-07 11:23:18 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-01-07 09:40:38 ----D---- C:\Windows\system32\config
2014-01-07 09:29:38 ----SHD---- C:\System Volume Information
2014-01-06 23:05:10 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-01-06 21:05:46 ----RD---- C:\Program Files (x86)
2014-01-06 21:05:45 ----HD---- C:\ProgramData
2014-01-06 19:37:15 ----D---- C:\Windows\inf
2014-01-06 17:08:36 ----RD---- C:\Program Files
2014-01-05 10:59:08 ----D---- C:\Program Files (x86)\Alawarhry.cz
2014-01-04 17:12:24 ----D---- C:\Windows\System32
2014-01-04 17:12:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-02 13:18:02 ----D---- C:\Windows
2014-01-02 13:14:39 ----D---- C:\Users\Notebook\AppData\Roaming\DAEMON Tools Lite
2014-01-02 13:14:15 ----D---- C:\Windows\Panther
2014-01-02 13:14:15 ----D---- C:\Windows\ModemLogs
2014-01-02 13:14:14 ----D---- C:\Windows\Logs
2014-01-02 13:14:14 ----D---- C:\Windows\debug
2014-01-02 13:04:02 ----D---- C:\Windows\system32\Tasks
2014-01-01 09:43:25 ----SHD---- C:\Windows\Installer
2013-12-31 18:43:41 ----D---- C:\Windows\system32\drivers
2013-12-31 18:43:40 ----D---- C:\Windows\system32\DriverStore
2013-12-31 18:43:40 ----D---- C:\Windows\system32\catroot
2013-12-31 10:00:59 ----D---- C:\ProgramData\AVAST Software
2013-12-31 09:41:13 ----D---- C:\Windows\SysWOW64
2013-12-31 09:25:39 ----D---- C:\Windows\system32\NDF
2013-12-30 14:55:03 ----D---- C:\ProgramData\WebcamMax
2013-12-28 11:06:01 ----D---- C:\ProgramData\Playrix Entertainment
2013-12-25 15:59:54 ----D---- C:\Windows\Prefetch
2013-12-24 08:26:03 ----D---- C:\Windows\winsxs
2013-12-20 21:04:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-19 22:10:48 ----D---- C:\Windows\system32\catroot2
2013-12-14 22:17:49 ----D---- C:\Windows\system32\MRT
2013-12-14 22:15:08 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 13:23:32 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-12 13:23:31 ----D---- C:\Program Files\Windows Media Player
2013-12-12 13:23:29 ----D---- C:\Program Files\Internet Explorer
2013-12-12 13:23:29 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-12 13:23:26 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-12-12 13:23:26 ----D---- C:\Windows\system32\sk-SK
2013-12-11 22:01:19 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 14:57:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-07-30 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 bckd;bckd; C:\Windows\system32\drivers\bckd.sys [2013-03-01 127216]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-11 1208320]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-23 1579520]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 5352960]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4065296]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 246376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 676968]
S1 vdrv8000;vdrv8000; C:\Windows\System32\Drivers\VDRV8000.SYS [2006-06-20 139264]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 HHCDHelp.sys;HHCDHelp.sys; \??\C:\Windows\system32\drivers\HHCDHelp.sys [2005-12-21 17408]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;avast! SecureLine TAP Adapter; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-30 40616]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 vcd8bus;Virtual CD v8 Bus Enumerator; C:\Windows\system32\DRIVERS\vcd8bus.sys [2006-01-27 33280]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 952320]
R2 bckwfs;Blue Coat K9 Web Protection; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2013-03-01 2649840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 VC8SecS;Virtual CD v8 Management Service; C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe [2006-09-01 109688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-11 1255736]
-----------------EOF-----------------
Run by Notebook at 2014-01-07 11:25:49
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 2 GB (3%) free of 51 GB
Total RAM: 2943 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:26:02, on 7. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 173.83.222.101 tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.tomshardware.co.uk
O1 - Hosts: 173.83.222.101 www.gmail.com
O1 - Hosts: 173.83.222.101 gmail.com
O1 - Hosts: 173.83.222.101 www.hotmail.com
O1 - Hosts: 173.83.222.101 hotmail.com
O1 - Hosts: 173.83.222.101 www.mail.ru
O1 - Hosts: 173.83.222.101 mail.ru
O1 - Hosts: 173.83.222.101 www.torrentz.eu
O1 - Hosts: 173.83.222.101 torrentz.eu
O1 - Hosts: 173.83.222.101 www.kat.ph
O1 - Hosts: 173.83.222.101 kat.ph
O1 - Hosts: 173.83.222.101 www.thepiratebay.se
O1 - Hosts: 173.83.222.101 thepiratebay.se
O1 - Hosts: 173.83.222.101 www.thepiratebay.org
O1 - Hosts: 173.83.222.101 thepiratebay.org
O1 - Hosts: 173.83.222.101 www.ehow.com
O1 - Hosts: 173.83.222.101 ehow.com
O1 - Hosts: 173.83.222.101 www.imeetzu.com
O1 - Hosts: 173.83.222.101 imeetzu.com
O1 - Hosts: 173.83.222.101 www.omegle.com
O1 - Hosts: 173.83.222.101 omegle.com
O1 - Hosts: 173.83.222.101 www.runescape.com
O1 - Hosts: 173.83.222.101 runescape.com
O1 - Hosts: 173.83.222.101 google.com
O1 - Hosts: 173.83.222.101 www.google.com
O1 - Hosts: 173.83.222.101 leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.leagueoflegends.com
O1 - Hosts: 173.83.222.101 www.google.ae
O1 - Hosts: 173.83.222.101 www.google.com.af
O1 - Hosts: 173.83.222.101 www.google.com.ag
O1 - Hosts: 173.83.222.101 www.google.off.ai
O1 - Hosts: 173.83.222.101 www.google.am
O1 - Hosts: 173.83.222.101 www.google.com.ar
O1 - Hosts: 173.83.222.101 www.google.as
O1 - Hosts: 173.83.222.101 www.google.at
O1 - Hosts: 173.83.222.101 www.google.com.au
O1 - Hosts: 173.83.222.101 www.google.az
O1 - Hosts: 173.83.222.101 www.google.ba
O1 - Hosts: 173.83.222.101 www.google.com.bd
O1 - Hosts: 173.83.222.101 www.google.be
O1 - Hosts: 173.83.222.101 www.google.bg
O1 - Hosts: 173.83.222.101 www.google.com.bh
O1 - Hosts: 173.83.222.101 www.google.bi
O1 - Hosts: 173.83.222.101 www.google.com.bo
O1 - Hosts: 173.83.222.101 www.google.com.br
O1 - Hosts: 173.83.222.101 www.google.bs
O1 - Hosts: 173.83.222.101 www.google.co.bw
O1 - Hosts: 173.83.222.101 www.google.com.bz
O1 - Hosts: 173.83.222.101 www.google.ca
O1 - Hosts: 173.83.222.101 www.google.cd
O1 - Hosts: 173.83.222.101 www.google.cg
O1 - Hosts: 173.83.222.101 www.google.ch
O1 - Hosts: 173.83.222.101 www.google.ci
O1 - Hosts: 173.83.222.101 www.google.co.ck
O1 - Hosts: 173.83.222.101 www.google.cl
O1 - Hosts: 173.83.222.101 www.google.cn
O1 - Hosts: 173.83.222.101 www.google.com.co
O1 - Hosts: 173.83.222.101 www.google.co.cr
O1 - Hosts: 173.83.222.101 www.google.com.cu
O1 - Hosts: 173.83.222.101 www.google.cz
O1 - Hosts: 173.83.222.101 www.google.de
O1 - Hosts: 173.83.222.101 www.google.dj
O1 - Hosts: 173.83.222.101 www.google.dk
O1 - Hosts: 173.83.222.101 www.google.dm
O1 - Hosts: 173.83.222.101 www.google.com.do
O1 - Hosts: 173.83.222.101 www.google.com.ec
O1 - Hosts: 173.83.222.101 www.google.ee
O1 - Hosts: 173.83.222.101 www.google.com.eg
O1 - Hosts: 173.83.222.101 www.google.es
O1 - Hosts: 173.83.222.101 www.google.com.et
O1 - Hosts: 173.83.222.101 www.google.fi
O1 - Hosts: 173.83.222.101 www.google.com.fj
O1 - Hosts: 173.83.222.101 www.google.fm
O1 - Hosts: 173.83.222.101 www.google.fr
O1 - Hosts: 173.83.222.101 www.google.ge
O1 - Hosts: 173.83.222.101 www.google.gg
O1 - Hosts: 173.83.222.101 www.google.com.gi
O1 - Hosts: 173.83.222.101 www.google.gl
O1 - Hosts: 173.83.222.101 www.google.gm
O1 - Hosts: 173.83.222.101 www.google.gr
O1 - Hosts: 173.83.222.101 www.google.com.gt
O1 - Hosts: 173.83.222.101 www.google.gy
O1 - Hosts: 173.83.222.101 www.google.com.hk
O1 - Hosts: 173.83.222.101 www.google.hn
O1 - Hosts: 173.83.222.101 www.google.hr
O1 - Hosts: 173.83.222.101 www.google.ht
O1 - Hosts: 173.83.222.101 www.google.hu
O1 - Hosts: 173.83.222.101 www.google.co.id
O1 - Hosts: 173.83.222.101 www.google.ie
O1 - Hosts: 173.83.222.101 www.google.co.il
O1 - Hosts: 173.83.222.101 www.google.co.im
O1 - Hosts: 173.83.222.101 www.google.co.in
O1 - Hosts: 173.83.222.101 www.google.is
O1 - Hosts: 173.83.222.101 www.google.it
O1 - Hosts: 173.83.222.101 www.google.co.je
O1 - Hosts: 173.83.222.101 www.google.com.jm
O1 - Hosts: 173.83.222.101 www.google.jo
O1 - Hosts: 173.83.222.101 www.google.co.jp
O1 - Hosts: 173.83.222.101 www.google.co.ke
O1 - Hosts: 173.83.222.101 www.google.kg
O2 - BHO: CrossriderApp0034362 - {11111111-1111-1111-1111-110311431162} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Facebook Messenger.lnk = Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Blue Coat K9 Web Protection (bckwfs) - Blue Coat Systems, Inc. - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14015 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
Ati2evxx.exe -Client
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
szndesktop.exe default start
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-1756235419-1846528497750837056362831475-85974988492988472682557183-225946432
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3204.10553a00.839642062 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3204 "\\.\pipe\gecko-crash-server-pipe.3204" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash2868.6720B990.25793 --host-broker-channel=Flash2868.6720B990.31678 --host-pid=2868 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=4288.0016F6DC.795602925 --proxy-stub-channel=Flash2868.6720B990.25793 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"SkyDrive"=C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-24 257136]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Messenger.lnk - C:\Users\Notebook\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-01-06 18:20:41 ----D---- C:\AdwCleaner
2014-01-06 17:08:36 ----D---- C:\Program Files\trend micro
2014-01-06 17:08:34 ----D---- C:\rsit
2014-01-04 13:22:19 ----D---- C:\Users\Notebook\AppData\Roaming\Boolat Games
2014-01-03 09:30:34 ----D---- C:\Users\Notebook\AppData\Roaming\Building the Great Wall of China
2014-01-02 14:05:07 ----ASH---- C:\pagefile.sys
2014-01-02 13:03:56 ----D---- C:\Program Files\CCleaner
2013-12-31 22:21:14 ----D---- C:\Users\Notebook\AppData\Roaming\Rovio
2013-12-31 18:44:27 ----D---- C:\Users\Notebook\AppData\Roaming\ESET
2013-12-31 18:42:16 ----D---- C:\ProgramData\ESET
2013-12-31 18:42:16 ----D---- C:\Program Files\ESET
2013-12-31 09:41:13 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-12-30 13:55:20 ----D---- C:\Games
2013-12-26 19:40:25 ----D---- C:\ProgramData\Reflexive
2013-12-26 19:39:25 ----D---- C:\Program Files (x86)\ReflexiveArcade
2013-12-26 14:48:43 ----D---- C:\Program Files (x86)\Vertrix 2
2013-12-24 08:14:39 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-12-20 21:00:14 ----D---- C:\Users\Notebook\AppData\Roaming\MythPeople
2013-12-20 12:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 16:10:35 ----D---- C:\Windows\rescache
2013-12-11 22:01:53 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 22:01:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 22:01:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 22:01:46 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 21:59:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 21:59:05 ----A---- C:\Windows\system32\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iesetup.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iernonce.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-11 21:59:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-11 21:59:01 ----A---- C:\Windows\system32\mshtml.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-11 21:58:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-11 21:58:58 ----A---- C:\Windows\system32\iertutil.dll
2013-12-11 21:58:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-11 21:58:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-11 21:58:56 ----A---- C:\Windows\system32\wininet.dll
2013-12-11 21:58:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-11 21:58:55 ----A---- C:\Windows\system32\urlmon.dll
2013-12-11 21:58:53 ----A---- C:\Windows\system32\ieframe.dll
2013-12-11 21:58:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-11 21:58:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-11 21:58:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-11 21:58:47 ----A---- C:\Windows\system32\jscript9.dll
2013-12-11 14:06:14 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 14:06:14 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 14:05:47 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 14:05:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 14:05:19 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 14:04:49 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 14:04:49 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 14:04:39 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 14:04:39 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 14:03:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 14:03:25 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 14:03:25 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\system32\wscript.exe
======List of files/folders modified in the last 1 months======
2014-01-07 11:25:55 ----D---- C:\Windows\Temp
2014-01-07 11:23:18 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-01-07 09:40:38 ----D---- C:\Windows\system32\config
2014-01-07 09:29:38 ----SHD---- C:\System Volume Information
2014-01-06 23:05:10 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-01-06 21:05:46 ----RD---- C:\Program Files (x86)
2014-01-06 21:05:45 ----HD---- C:\ProgramData
2014-01-06 19:37:15 ----D---- C:\Windows\inf
2014-01-06 17:08:36 ----RD---- C:\Program Files
2014-01-05 10:59:08 ----D---- C:\Program Files (x86)\Alawarhry.cz
2014-01-04 17:12:24 ----D---- C:\Windows\System32
2014-01-04 17:12:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-02 13:18:02 ----D---- C:\Windows
2014-01-02 13:14:39 ----D---- C:\Users\Notebook\AppData\Roaming\DAEMON Tools Lite
2014-01-02 13:14:15 ----D---- C:\Windows\Panther
2014-01-02 13:14:15 ----D---- C:\Windows\ModemLogs
2014-01-02 13:14:14 ----D---- C:\Windows\Logs
2014-01-02 13:14:14 ----D---- C:\Windows\debug
2014-01-02 13:04:02 ----D---- C:\Windows\system32\Tasks
2014-01-01 09:43:25 ----SHD---- C:\Windows\Installer
2013-12-31 18:43:41 ----D---- C:\Windows\system32\drivers
2013-12-31 18:43:40 ----D---- C:\Windows\system32\DriverStore
2013-12-31 18:43:40 ----D---- C:\Windows\system32\catroot
2013-12-31 10:00:59 ----D---- C:\ProgramData\AVAST Software
2013-12-31 09:41:13 ----D---- C:\Windows\SysWOW64
2013-12-31 09:25:39 ----D---- C:\Windows\system32\NDF
2013-12-30 14:55:03 ----D---- C:\ProgramData\WebcamMax
2013-12-28 11:06:01 ----D---- C:\ProgramData\Playrix Entertainment
2013-12-25 15:59:54 ----D---- C:\Windows\Prefetch
2013-12-24 08:26:03 ----D---- C:\Windows\winsxs
2013-12-20 21:04:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-19 22:10:48 ----D---- C:\Windows\system32\catroot2
2013-12-14 22:17:49 ----D---- C:\Windows\system32\MRT
2013-12-14 22:15:08 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 13:23:32 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-12 13:23:31 ----D---- C:\Program Files\Windows Media Player
2013-12-12 13:23:29 ----D---- C:\Program Files\Internet Explorer
2013-12-12 13:23:29 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-12 13:23:26 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-12-12 13:23:26 ----D---- C:\Windows\system32\sk-SK
2013-12-11 22:01:19 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 14:57:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-07-30 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 bckd;bckd; C:\Windows\system32\drivers\bckd.sys [2013-03-01 127216]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-11 1208320]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-23 1579520]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 5352960]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4065296]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 246376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 676968]
S1 vdrv8000;vdrv8000; C:\Windows\System32\Drivers\VDRV8000.SYS [2006-06-20 139264]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 HHCDHelp.sys;HHCDHelp.sys; \??\C:\Windows\system32\drivers\HHCDHelp.sys [2005-12-21 17408]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;avast! SecureLine TAP Adapter; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-30 40616]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 vcd8bus;Virtual CD v8 Bus Enumerator; C:\Windows\system32\DRIVERS\vcd8bus.sys [2006-01-27 33280]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 952320]
R2 bckwfs;Blue Coat K9 Web Protection; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2013-03-01 2649840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
R2 VC8SecS;Virtual CD v8 Management Service; C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe [2006-09-01 109688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-11 1255736]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119400
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Nejdu stranky google.sk a facebook.com
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:files
C:\ProgramData\Skype\Toolbars
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
:services
Skype C2C Service
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431162}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
:commands
[Purity]
[Emptytemp]
[Emptyflash]
[Resethosts]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Nejdu stranky google.sk a facebook.com
Logfile of random's system information tool 1.08 (written by random/random)
Run by Notebook at 2014-01-07 20:46:49
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 2 GB (4%) free of 51 GB
Total RAM: 2943 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:46:55, on 7. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe
C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Blue Coat K9 Web Protection (bckwfs) - Blue Coat Systems, Inc. - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9216 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Ati2evxx.exe -Client
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe"
"taskhost.exe"
taskeng.exe {0F8E3283-636F-4241-B580-515898A02587}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
"C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
szndesktop.exe default start
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-1079406977178965055-12339121661449572592-907404523-672838716-6700497561610395450
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3436.f490c00.1680677642 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3436 "\\.\pipe\gecko-crash-server-pipe.3436" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash1696.6C44B990.27363 --host-broker-channel=Flash1696.6C44B990.18979 --host-pid=1696 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=2412.0037F888.1044263511 --proxy-stub-channel=Flash1696.6C44B990.27363 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"SkyDrive"=C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-24 257136]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-01-07 20:40:55 ----D---- C:\_OTM
2014-01-06 18:20:41 ----D---- C:\AdwCleaner
2014-01-06 17:08:36 ----D---- C:\Program Files\trend micro
2014-01-06 17:08:34 ----D---- C:\rsit
2014-01-04 13:22:19 ----D---- C:\Users\Notebook\AppData\Roaming\Boolat Games
2014-01-03 09:30:34 ----D---- C:\Users\Notebook\AppData\Roaming\Building the Great Wall of China
2014-01-02 14:05:07 ----ASH---- C:\pagefile.sys
2014-01-02 13:03:56 ----D---- C:\Program Files\CCleaner
2013-12-31 22:21:14 ----D---- C:\Users\Notebook\AppData\Roaming\Rovio
2013-12-31 18:44:27 ----D---- C:\Users\Notebook\AppData\Roaming\ESET
2013-12-31 18:42:16 ----D---- C:\ProgramData\ESET
2013-12-31 18:42:16 ----D---- C:\Program Files\ESET
2013-12-31 09:41:13 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-12-30 13:55:20 ----D---- C:\Games
2013-12-26 19:40:25 ----D---- C:\ProgramData\Reflexive
2013-12-26 19:39:25 ----D---- C:\Program Files (x86)\ReflexiveArcade
2013-12-26 14:48:43 ----D---- C:\Program Files (x86)\Vertrix 2
2013-12-24 08:14:39 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-12-20 21:00:14 ----D---- C:\Users\Notebook\AppData\Roaming\MythPeople
2013-12-20 12:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 16:10:35 ----D---- C:\Windows\rescache
2013-12-11 22:01:53 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 22:01:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 22:01:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 22:01:46 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 21:59:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 21:59:05 ----A---- C:\Windows\system32\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iesetup.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iernonce.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-11 21:59:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-11 21:59:01 ----A---- C:\Windows\system32\mshtml.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-11 21:58:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-11 21:58:58 ----A---- C:\Windows\system32\iertutil.dll
2013-12-11 21:58:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-11 21:58:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-11 21:58:56 ----A---- C:\Windows\system32\wininet.dll
2013-12-11 21:58:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-11 21:58:55 ----A---- C:\Windows\system32\urlmon.dll
2013-12-11 21:58:53 ----A---- C:\Windows\system32\ieframe.dll
2013-12-11 21:58:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-11 21:58:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-11 21:58:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-11 21:58:47 ----A---- C:\Windows\system32\jscript9.dll
2013-12-11 14:06:14 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 14:06:14 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 14:05:47 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 14:05:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 14:05:19 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 14:04:49 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 14:04:49 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 14:04:39 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 14:04:39 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 14:03:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 14:03:25 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 14:03:25 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\system32\wscript.exe
======List of files/folders modified in the last 1 months======
2014-01-07 20:43:15 ----D---- C:\Windows\system32\catroot2
2014-01-07 20:43:14 ----D---- C:\Windows\Temp
2014-01-07 20:43:02 ----D---- C:\Windows\system32\config
2014-01-07 20:42:40 ----D---- C:\Windows\system32\drivers\etc
2014-01-07 20:40:57 ----D---- C:\Windows\Tasks
2014-01-07 20:40:57 ----D---- C:\ProgramData\Skype
2014-01-07 13:06:22 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-01-07 09:29:38 ----SHD---- C:\System Volume Information
2014-01-06 23:05:10 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-01-06 21:05:46 ----RD---- C:\Program Files (x86)
2014-01-06 21:05:45 ----HD---- C:\ProgramData
2014-01-06 19:37:15 ----D---- C:\Windows\inf
2014-01-06 17:08:36 ----RD---- C:\Program Files
2014-01-05 10:59:08 ----D---- C:\Program Files (x86)\Alawarhry.cz
2014-01-04 17:12:24 ----D---- C:\Windows\System32
2014-01-04 17:12:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-02 13:18:02 ----D---- C:\Windows
2014-01-02 13:14:39 ----D---- C:\Users\Notebook\AppData\Roaming\DAEMON Tools Lite
2014-01-02 13:14:15 ----D---- C:\Windows\Panther
2014-01-02 13:14:15 ----D---- C:\Windows\ModemLogs
2014-01-02 13:14:14 ----D---- C:\Windows\Logs
2014-01-02 13:14:14 ----D---- C:\Windows\debug
2014-01-02 13:04:02 ----D---- C:\Windows\system32\Tasks
2014-01-01 09:43:25 ----SHD---- C:\Windows\Installer
2013-12-31 18:43:41 ----D---- C:\Windows\system32\drivers
2013-12-31 18:43:40 ----D---- C:\Windows\system32\DriverStore
2013-12-31 18:43:40 ----D---- C:\Windows\system32\catroot
2013-12-31 10:00:59 ----D---- C:\ProgramData\AVAST Software
2013-12-31 09:41:13 ----D---- C:\Windows\SysWOW64
2013-12-31 09:25:39 ----D---- C:\Windows\system32\NDF
2013-12-30 14:55:03 ----D---- C:\ProgramData\WebcamMax
2013-12-28 11:06:01 ----D---- C:\ProgramData\Playrix Entertainment
2013-12-25 15:59:54 ----D---- C:\Windows\Prefetch
2013-12-24 08:26:03 ----D---- C:\Windows\winsxs
2013-12-20 21:04:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-14 22:17:49 ----D---- C:\Windows\system32\MRT
2013-12-14 22:15:08 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 13:23:32 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-12 13:23:31 ----D---- C:\Program Files\Windows Media Player
2013-12-12 13:23:29 ----D---- C:\Program Files\Internet Explorer
2013-12-12 13:23:29 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-12 13:23:26 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-12-12 13:23:26 ----D---- C:\Windows\system32\sk-SK
2013-12-11 22:01:19 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 14:57:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-07-30 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 bckd;bckd; C:\Windows\system32\drivers\bckd.sys [2013-03-01 127216]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-11 1208320]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-23 1579520]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 5352960]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4065296]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 246376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 676968]
S1 vdrv8000;vdrv8000; C:\Windows\System32\Drivers\VDRV8000.SYS [2006-06-20 139264]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 HHCDHelp.sys;HHCDHelp.sys; \??\C:\Windows\system32\drivers\HHCDHelp.sys [2005-12-21 17408]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;avast! SecureLine TAP Adapter; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-30 40616]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 vcd8bus;Virtual CD v8 Bus Enumerator; C:\Windows\system32\DRIVERS\vcd8bus.sys [2006-01-27 33280]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 952320]
R2 bckwfs;Blue Coat K9 Web Protection; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2013-03-01 2649840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 VC8SecS;Virtual CD v8 Management Service; C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe [2006-09-01 109688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-11 1255736]
-----------------EOF-----------------
Run by Notebook at 2014-01-07 20:46:49
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 2 GB (4%) free of 51 GB
Total RAM: 2943 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:46:55, on 7. 1. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe
C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.alawarhry.cz/?pid=6
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files (x86)\WebcamMax\wcmmon.exe" -a
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Blue Coat K9 Web Protection (bckwfs) - Blue Coat Systems, Inc. - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9216 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Ati2evxx.exe -Client
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\LSI SoftModem\agr64svc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe"
"taskhost.exe"
taskeng.exe {0F8E3283-636F-4241-B580-515898A02587}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe" -c
"C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
szndesktop.exe default start
"C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-1079406977178965055-12339121661449572592-907404523-672838716-6700497561610395450
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3436.f490c00.1680677642 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3436 "\\.\pipe\gecko-crash-server-pipe.3436" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash1696.6C44B990.27363 --host-broker-channel=Flash1696.6C44B990.18979 --host-pid=1696 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=2412.0037F888.1044263511 --proxy-stub-channel=Flash1696.6C44B990.27363 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Notebook\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Notebook\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"WebcamMaxAutoRun"=C:\Program Files (x86)\WebcamMax\wcmmon.exe [2011-07-17 1038848]
"SkyDrive"=C:\Users\Notebook\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-09-24 257136]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-01-07 20:40:55 ----D---- C:\_OTM
2014-01-06 18:20:41 ----D---- C:\AdwCleaner
2014-01-06 17:08:36 ----D---- C:\Program Files\trend micro
2014-01-06 17:08:34 ----D---- C:\rsit
2014-01-04 13:22:19 ----D---- C:\Users\Notebook\AppData\Roaming\Boolat Games
2014-01-03 09:30:34 ----D---- C:\Users\Notebook\AppData\Roaming\Building the Great Wall of China
2014-01-02 14:05:07 ----ASH---- C:\pagefile.sys
2014-01-02 13:03:56 ----D---- C:\Program Files\CCleaner
2013-12-31 22:21:14 ----D---- C:\Users\Notebook\AppData\Roaming\Rovio
2013-12-31 18:44:27 ----D---- C:\Users\Notebook\AppData\Roaming\ESET
2013-12-31 18:42:16 ----D---- C:\ProgramData\ESET
2013-12-31 18:42:16 ----D---- C:\Program Files\ESET
2013-12-31 09:41:13 ----SD---- C:\Windows\SYSWOW64\Microsoft
2013-12-30 13:55:20 ----D---- C:\Games
2013-12-26 19:40:25 ----D---- C:\ProgramData\Reflexive
2013-12-26 19:39:25 ----D---- C:\Program Files (x86)\ReflexiveArcade
2013-12-26 14:48:43 ----D---- C:\Program Files (x86)\Vertrix 2
2013-12-24 08:14:39 ----A---- C:\Windows\system32\drivers\aswFW.sys
2013-12-20 21:00:14 ----D---- C:\Users\Notebook\AppData\Roaming\MythPeople
2013-12-20 12:43:10 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-19 16:10:35 ----D---- C:\Windows\rescache
2013-12-11 22:01:53 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-11 22:01:51 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-12-11 22:01:50 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-12-11 22:01:46 ----A---- C:\Windows\system32\wmp.dll
2013-12-11 21:59:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 21:59:05 ----A---- C:\Windows\system32\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-11 21:59:04 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iesetup.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\iernonce.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-11 21:59:03 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-11 21:59:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-11 21:59:01 ----A---- C:\Windows\system32\mshtml.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-11 21:59:00 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-11 21:58:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-11 21:58:58 ----A---- C:\Windows\system32\iertutil.dll
2013-12-11 21:58:57 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-11 21:58:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-11 21:58:56 ----A---- C:\Windows\system32\wininet.dll
2013-12-11 21:58:55 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-11 21:58:55 ----A---- C:\Windows\system32\urlmon.dll
2013-12-11 21:58:53 ----A---- C:\Windows\system32\ieframe.dll
2013-12-11 21:58:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-11 21:58:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-11 21:58:48 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-11 21:58:47 ----A---- C:\Windows\system32\jscript9.dll
2013-12-11 14:06:14 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-12-11 14:06:14 ----A---- C:\Windows\system32\msieftp.dll
2013-12-11 14:05:47 ----A---- C:\Windows\system32\win32k.sys
2013-12-11 14:05:19 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-12-11 14:05:19 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-11 14:04:49 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-12-11 14:04:49 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-11 14:04:39 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-12-11 14:04:39 ----A---- C:\Windows\system32\tzres.dll
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-11 14:03:51 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-11 14:03:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2013-12-11 14:03:25 ----A---- C:\Windows\system32\scrrun.dll
2013-12-11 14:03:25 ----A---- C:\Windows\system32\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2013-12-11 14:03:24 ----A---- C:\Windows\SYSWOW64\cscript.exe
2013-12-11 14:03:24 ----A---- C:\Windows\system32\wscript.exe
======List of files/folders modified in the last 1 months======
2014-01-07 20:43:15 ----D---- C:\Windows\system32\catroot2
2014-01-07 20:43:14 ----D---- C:\Windows\Temp
2014-01-07 20:43:02 ----D---- C:\Windows\system32\config
2014-01-07 20:42:40 ----D---- C:\Windows\system32\drivers\etc
2014-01-07 20:40:57 ----D---- C:\Windows\Tasks
2014-01-07 20:40:57 ----D---- C:\ProgramData\Skype
2014-01-07 13:06:22 ----D---- C:\Users\Notebook\AppData\Roaming\Skype
2014-01-07 09:29:38 ----SHD---- C:\System Volume Information
2014-01-06 23:05:10 ----D---- C:\Users\Notebook\AppData\Roaming\vlc
2014-01-06 21:05:46 ----RD---- C:\Program Files (x86)
2014-01-06 21:05:45 ----HD---- C:\ProgramData
2014-01-06 19:37:15 ----D---- C:\Windows\inf
2014-01-06 17:08:36 ----RD---- C:\Program Files
2014-01-05 10:59:08 ----D---- C:\Program Files (x86)\Alawarhry.cz
2014-01-04 17:12:24 ----D---- C:\Windows\System32
2014-01-04 17:12:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-02 13:18:02 ----D---- C:\Windows
2014-01-02 13:14:39 ----D---- C:\Users\Notebook\AppData\Roaming\DAEMON Tools Lite
2014-01-02 13:14:15 ----D---- C:\Windows\Panther
2014-01-02 13:14:15 ----D---- C:\Windows\ModemLogs
2014-01-02 13:14:14 ----D---- C:\Windows\Logs
2014-01-02 13:14:14 ----D---- C:\Windows\debug
2014-01-02 13:04:02 ----D---- C:\Windows\system32\Tasks
2014-01-01 09:43:25 ----SHD---- C:\Windows\Installer
2013-12-31 18:43:41 ----D---- C:\Windows\system32\drivers
2013-12-31 18:43:40 ----D---- C:\Windows\system32\DriverStore
2013-12-31 18:43:40 ----D---- C:\Windows\system32\catroot
2013-12-31 10:00:59 ----D---- C:\ProgramData\AVAST Software
2013-12-31 09:41:13 ----D---- C:\Windows\SysWOW64
2013-12-31 09:25:39 ----D---- C:\Windows\system32\NDF
2013-12-30 14:55:03 ----D---- C:\ProgramData\WebcamMax
2013-12-28 11:06:01 ----D---- C:\ProgramData\Playrix Entertainment
2013-12-25 15:59:54 ----D---- C:\Windows\Prefetch
2013-12-24 08:26:03 ----D---- C:\Windows\winsxs
2013-12-20 21:04:26 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-14 22:17:49 ----D---- C:\Windows\system32\MRT
2013-12-14 22:15:08 ----A---- C:\Windows\system32\MRT.exe
2013-12-12 13:23:32 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-12 13:23:31 ----D---- C:\Program Files\Windows Media Player
2013-12-12 13:23:29 ----D---- C:\Program Files\Internet Explorer
2013-12-12 13:23:29 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-12 13:23:26 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-12-12 13:23:26 ----D---- C:\Windows\system32\sk-SK
2013-12-11 22:01:19 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 14:57:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [2000-01-01 16552]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-07-30 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 bckd;bckd; C:\Windows\system32\drivers\bckd.sys [2013-03-01 127216]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 WCMVCAM;WebcamMax, WDM Video Capture; C:\Windows\system32\DRIVERS\wcmvcam64.sys [2012-04-15 1071032]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-11 1208320]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-11-23 1579520]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 5352960]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2000-01-01 4065296]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2000-01-01 246376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 676968]
S1 vdrv8000;vdrv8000; C:\Windows\System32\Drivers\VDRV8000.SYS [2006-06-20 139264]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 HHCDHelp.sys;HHCDHelp.sys; \??\C:\Windows\system32\drivers\HHCDHelp.sys [2005-12-21 17408]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;avast! SecureLine TAP Adapter; C:\Windows\system32\DRIVERS\tap0901.sys [2013-04-30 40616]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 vcd8bus;Virtual CD v8 Bus Enumerator; C:\Windows\system32\DRIVERS\vcd8bus.sys [2006-01-27 33280]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-07-04 361984]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 952320]
R2 bckwfs;Blue Coat K9 Web Protection; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2013-03-01 2649840]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 VC8SecS;Virtual CD v8 Management Service; C:\Program Files (x86)\Virtual CD v8\System\VC8SecS.exe [2006-09-01 109688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-20 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-11 1255736]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119400
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Nejdu stranky google.sk a facebook.com
Log je již OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Nejdu stranky google.sk a facebook.com
Ano už to funguje díki 
-
Rudy
- Site Admin
- Příspěvky: 119400
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Nejdu stranky google.sk a facebook.com
Nějaký sajrajt vám přepsal hosts soubor. Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?