prosím o kontrolu - lítá mi myš

[pepis09]

Dobrý den,
prosím o kontrolu pc - lítá mi myš, přeinstaloval jsem pc, ale po čase začala znovu.
Děkuji Josef

Logfile of random's system information tool 1.10 (written by random/random)
Run by ss at 2018-06-05 08:16:30
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 83 GB (59%) free of 141 GB
Total RAM: 2026 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:17:09, on 5.6.2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.19003)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ss\Downloads\RSIT.exe
C:\Program Files\trend micro\ss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Program Files\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PDFsam Enhanced 4 Manager - SOBER LEMUR SAS DI VACONDIO ANDREA - C:\Program Files\PDFsam Enhanced 4 Manager\PDFsam Enhanced 4\PDFsam Manager.exe

--
End of file - 4104 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\sfvl9a3c.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf]
"Description"=
"Path"=C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.60.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf]
"Description"=Handles PDF files in place in the browser
"Path"=C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf]
"Description"=Handles PDF files in place in the browser
"Path"=C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2018-05-17 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2018-05-17 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-08-04 597552]

C:\Users\ss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-06-05 08:16:30 ----D---- C:\rsit
2018-06-05 08:16:30 ----D---- C:\Program Files\trend micro
2018-06-04 09:56:02 ----D---- C:\ProgramData\Foxit Software
2018-06-04 09:55:59 ----D---- C:\Users\ss\AppData\Roaming\Foxit AgentInformation
2018-06-04 09:55:59 ----D---- C:\ProgramData\Foxit ContentPlatform
2018-06-04 09:55:54 ----D---- C:\Users\ss\AppData\Roaming\Foxit Software
2018-06-04 09:55:45 ----D---- C:\Program Files\Foxit Software
2018-05-22 20:14:34 ----SHD---- C:\Config.Msi
2018-05-17 20:41:58 ----D---- C:\Program Files\Seznam.cz
2018-05-17 20:41:33 ----D---- C:\Users\ss\AppData\Roaming\Seznam.cz
2018-05-17 20:10:33 ----D---- C:\Users\ss\AppData\Roaming\PDF Producer
2018-05-17 20:01:16 ----D---- C:\Program Files\PDFsam Enhanced 4 Manager
2018-05-17 19:54:43 ----D---- C:\Users\ss\AppData\Roaming\PDFsam Enhanced 4
2018-05-17 19:51:33 ----D---- C:\Program Files\Common Files\Java
2018-05-17 19:51:01 ----D---- C:\Users\ss\AppData\Roaming\Sun
2018-05-17 19:50:08 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2018-05-17 19:48:59 ----D---- C:\ProgramData\Oracle
2018-05-17 19:48:52 ----D---- C:\Program Files\Java
2018-05-17 19:45:07 ----D---- C:\ProgramData\PDFsam Enhanced 4
2018-05-17 19:36:02 ----D---- C:\Program Files\Common Files\Bullzip
2018-05-17 12:33:07 ----D---- C:\Users\ss\AppData\Roaming\PDF Architect 6
2018-05-16 16:50:38 ----D---- C:\Users\ss\AppData\Roaming\Tracker Software
2018-05-09 18:59:09 ----A---- C:\Windows\system32\mshtml.dll
2018-05-09 18:59:06 ----A---- C:\Windows\system32\ieframe.dll
2018-05-09 18:59:05 ----A---- C:\Windows\system32\jscript9.dll
2018-05-09 18:59:04 ----A---- C:\Windows\system32\wininet.dll
2018-05-09 18:59:04 ----A---- C:\Windows\system32\iertutil.dll
2018-05-09 18:59:03 ----A---- C:\Windows\system32\wuaueng.dll
2018-05-09 18:59:03 ----A---- C:\Windows\system32\win32k.sys
2018-05-09 18:59:03 ----A---- C:\Windows\system32\urlmon.dll
2018-05-09 18:59:02 ----A---- C:\Windows\system32\wucltux.dll
2018-05-09 18:59:02 ----A---- C:\Windows\system32\vbscript.dll
2018-05-09 18:59:02 ----A---- C:\Windows\system32\msfeeds.dll
2018-05-09 18:59:02 ----A---- C:\Windows\system32\jscript.dll
2018-05-09 18:59:01 ----A---- C:\Windows\system32\wuapi.dll
2018-05-09 18:59:01 ----A---- C:\Windows\system32\oleaut32.dll
2018-05-09 18:59:01 ----A---- C:\Windows\system32\drivers\srv.sys
2018-05-09 18:59:00 ----A---- C:\Windows\system32\rpcss.dll
2018-05-09 18:59:00 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-05-09 18:59:00 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-05-09 18:59:00 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-05-09 18:59:00 ----A---- C:\Windows\system32\comsvcs.dll
2018-05-09 18:59:00 ----A---- C:\Windows\system32\clfs.sys
2018-05-09 18:58:59 ----A---- C:\Windows\system32\srvsvc.dll
2018-05-09 18:58:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-05-09 18:58:58 ----A---- C:\Windows\system32\wudriver.dll
2018-05-09 18:58:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-05-09 18:58:58 ----A---- C:\Windows\system32\itss.dll
2018-05-09 18:58:58 ----A---- C:\Windows\system32\iedkcs32.dll
2018-05-09 18:58:57 ----A---- C:\Windows\system32\winload.exe
2018-05-09 18:58:57 ----A---- C:\Windows\system32\catsrvut.dll
2018-05-09 18:58:56 ----A---- C:\Windows\system32\ntdll.dll
2018-05-09 18:58:56 ----A---- C:\Windows\system32\halmacpi.dll
2018-05-09 18:58:56 ----A---- C:\Windows\system32\halacpi.dll
2018-05-09 18:58:56 ----A---- C:\Windows\system32\hal.dll
2018-05-09 18:58:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-05-09 18:58:55 ----A---- C:\Windows\system32\wuwebv.dll
2018-05-09 18:58:55 ----A---- C:\Windows\system32\itircl.dll
2018-05-09 18:58:55 ----A---- C:\Windows\system32\dxtmsft.dll
2018-05-09 18:58:55 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-05-09 18:58:54 ----A---- C:\Windows\system32\webcheck.dll
2018-05-09 18:58:54 ----A---- C:\Windows\system32\ole32.dll
2018-05-09 18:58:54 ----A---- C:\Windows\system32\msrating.dll
2018-05-09 18:58:54 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-05-09 18:58:54 ----A---- C:\Windows\system32\hhsetup.dll
2018-05-09 18:58:54 ----A---- C:\Windows\system32\dxtrans.dll
2018-05-09 18:58:54 ----A---- C:\Windows\hh.exe
2018-05-09 18:58:53 ----A---- C:\Windows\system32\winsrv.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\sscore.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\occache.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\mshtmled.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\KernelBase.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\kernel32.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\jscript9diag.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\inseng.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\ieUnatt.exe
2018-05-09 18:58:53 ----A---- C:\Windows\system32\ieui.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\iesetup.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\iernonce.dll
2018-05-09 18:58:53 ----A---- C:\Windows\system32\ie4uinit.exe
2018-05-09 18:58:53 ----A---- C:\Windows\system32\conhost.exe
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-09 18:58:52 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\TSpkg.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\oleres.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\lsasrv.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\jsproxy.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-05-09 18:58:52 ----A---- C:\Windows\system32\ieapfltr.dll
2018-05-09 18:58:52 ----A---- C:\Windows\system32\comcat.dll
2018-05-09 18:58:51 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-09 18:58:51 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wups2.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wups.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wuauclt.exe
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wuapp.exe
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\WinSetupUI.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\wdigest.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\sspisrv.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\sspicli.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\srcore.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\srclient.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\smss.exe
2018-05-09 18:58:51 ----A---- C:\Windows\system32\schannel.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\secur32.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\rstrui.exe
2018-05-09 18:58:51 ----A---- C:\Windows\system32\rpchttp.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\rpcrt4.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\ncrypt.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\msv1_0.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\lsass.exe
2018-05-09 18:58:51 ----A---- C:\Windows\system32\kerberos.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\drivers\videoprt.sys
2018-05-09 18:58:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-05-09 18:58:51 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-05-09 18:58:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-05-09 18:58:51 ----A---- C:\Windows\system32\drivers\appid.sys
2018-05-09 18:58:51 ----A---- C:\Windows\system32\csrsrv.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\cryptbase.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\credssp.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\bcrypt.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\appidapi.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\apisetschema.dll
2018-05-09 18:58:51 ----A---- C:\Windows\system32\advapi32.dll
2018-05-09 18:58:50 ----A---- C:\Windows\system32\tzres.dll
2018-05-09 18:58:50 ----A---- C:\Windows\system32\msobjs.dll
2018-05-09 18:58:50 ----A---- C:\Windows\system32\msaudite.dll
2018-05-09 18:58:50 ----A---- C:\Windows\system32\auditpol.exe
2018-05-09 18:58:50 ----A---- C:\Windows\system32\appidsvc.dll
2018-05-09 18:58:50 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-05-09 18:58:50 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-05-09 18:58:50 ----A---- C:\Windows\system32\adtschema.dll

======List of files/folders modified in the last 1 month======

2018-06-05 08:16:41 ----D---- C:\Windows\Prefetch
2018-06-05 08:16:32 ----D---- C:\Windows\Temp
2018-06-05 08:16:30 ----RD---- C:\Program Files
2018-06-05 07:51:17 ----D---- C:\Windows\system32\config
2018-06-05 07:41:53 ----SHD---- C:\System Volume Information
2018-06-05 07:40:48 ----D---- C:\Windows\System32
2018-06-05 07:40:47 ----D---- C:\Windows\inf
2018-06-05 07:40:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-06-04 09:56:02 ----HD---- C:\ProgramData
2018-06-04 09:27:13 ----D---- C:\Windows
2018-06-04 09:20:02 ----D---- C:\Windows\SoftwareDistribution
2018-05-29 17:00:23 ----D---- C:\Users\ss\AppData\Roaming\vlc
2018-05-22 20:22:39 ----SHD---- C:\Windows\Installer
2018-05-22 20:22:32 ----D---- C:\Windows\system32\Tasks
2018-05-22 20:19:30 ----D---- C:\Program Files\Common Files
2018-05-22 20:18:30 ----RSD---- C:\Windows\assembly
2018-05-22 20:12:50 ----D---- C:\Program Files\Adobe
2018-05-22 20:12:34 ----D---- C:\Program Files\Common Files\Adobe
2018-05-19 20:49:51 ----D---- C:\Program Files\Mozilla Maintenance Service
2018-05-19 20:49:51 ----D---- C:\Program Files\Mozilla Firefox
2018-05-17 20:02:47 ----D---- C:\Windows\system32\catroot2
2018-05-16 09:54:58 ----SD---- C:\Users\ss\AppData\Roaming\Microsoft
2018-05-10 12:27:42 ----D---- C:\Windows\rescache
2018-05-10 11:58:29 ----D---- C:\Windows\Microsoft.NET
2018-05-10 11:50:45 ----D---- C:\Windows\winsxs
2018-05-10 11:47:27 ----D---- C:\Windows\system32\drivers\en-US
2018-05-10 11:47:27 ----D---- C:\Windows\system32\drivers
2018-05-10 11:47:27 ----D---- C:\Windows\system32\cs-CZ
2018-05-10 11:47:27 ----D---- C:\Program Files\Internet Explorer
2018-05-10 11:47:26 ----D---- C:\Windows\system32\en-US
2018-05-10 11:47:23 ----D---- C:\Windows\system32\Boot
2018-05-08 20:13:01 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-05-08 20:12:50 ----D---- C:\Windows\system32\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 123328]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2018-02-10 52928]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 94208]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2017-08-13 15872]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2018-02-10 51904]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2018-02-10 52928]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 FoxitReaderService;Foxit Reader Service; C:\Program Files\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [2018-04-17 1659456]
R2 PDFsam Enhanced 4 Manager;PDFsam Enhanced 4 Manager; C:\Program Files\PDFsam Enhanced 4 Manager\PDFsam Enhanced 4\PDFsam Manager.exe [2018-03-27 1085384]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-10-04 107624]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2018-02-21 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08 272384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2018-04-22 104960]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-19 174544]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-10-04 47200]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-10-04 136288]

-----------------EOF-----------------

[JaRon]

ahoj,
skusal si:
- inu mys ?
- zapojit do iného portu ?
- podlozka pod mys jednofarebna

[pepis09]

Dělá mi to i touchpad

[JaRon]

mas nainstalovane ovladace k chipsetu MB
nie su ziadne vykricniky, otazniky v spravcovi HW

[pepis09]

Já jsem s tím měl problém i předtím, bylo to nějakým virem, řešil jsem to tady, všechno mi funguje, třeba půl hodky a pak ta myš začne hrozně lítat, nemůžu zadat ani text do vyhledávače, všechno smaže, ani na ni nesahám, pozavírá mi to všechna okna v prohlížeči, otevřených souborech, přesouvá soubory. Přeinstaloval pc, ale asi to nestačilo.

[JaRon]

Ak myslis, ze je to virovy problem, tak to prescanuj nejakym AV !
Ziadny AV tam nevidim ,,,

[pepis09]

tak jsem to projel eset online scanerem - výsledek
C:\Users\ss\Downloads\PDFCreator-3_2_0-Setup.exe varianta infiltrace Win32/LuluSoftware.A potenciálně nechtěná aplikace
C:\Users\ss\Downloads\PDFsam_Basic3_Installer(1).exe varianta infiltrace Win32/LuluSoftware.A potenciálně nechtěná aplikace
C:\Users\ss\Downloads\PDFsam_Basic3_Installer.exe varianta infiltrace Win32/LuluSoftware.A potenciálně nechtěná aplikace

pak jsem stáhnul windows security essential - ten nenašel nic

Myš mi lítá pořád, ani na to nesáhnu, jenom chci něco napsat a všechno mi smaže, přesouvá soubory, vypíná videa

[JaRon]

Vycisti PC s Adwcleanerom
a stale nemam odpoved k otazke chipsetu

[pepis09]

tak jsem to vyčistil, nic to nenašlo

vykřičníky jsou v dalších zařízeních dal jsem to do souboru

[JaRon]

Ako som pisal, treba zistit typ motherboardu a nainstalovat dostupne ovladace, hlavne chipset
Prip. skus slimdrivers http://www.stahuj.centrum.cz/utility_a_ ... imdrivers/

[pepis09]

ok, doinstaluji to, snad to pomůže, ale ty ovladače tam nemám hroznou dobu, tak 2 roky a vše fungovalo, ta myš mě zlobí tak půl roku, ted ještě musím na googlu potvrzovat, že nejsem robot. Přijde mi,že to začne dělat, jak pustím fb.

[pepis09]

tak jsem to doinstaloval a kurzor lítá pořád

[JaRon]

vloz oba logy FRST

[pepis09]

FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06.06.2018 01
Ran by ss (administrator) on SS-PC (11-06-2018 10:57:01)
Running from C:\Users\ss\Downloads
Loaded Profiles: ss (Available Profiles: ss)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Avanquest Software ) C:\Program Files\Digital Line Detect\DLG.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2018-06-08]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk [2018-06-08]
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\Users\ss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2018-02-21]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.3.181 188.75.176.2 85.132.179.206 10.100.0.1
Tcpip\..\Interfaces\{F045A54C-1851-421F-9327-747AD0CDF9CC}: [DhcpNameServer] 192.168.3.181 188.75.176.2 85.132.179.206 10.100.0.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-217029343-4229803616-1856704772-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2018-05-17] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2018-05-17] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: sfvl9a3c.default
FF ProfilePath: C:\Users\ss\AppData\Roaming\Mozilla\Firefox\Profiles\sfvl9a3c.default [2018-06-11]
FF Homepage: Mozilla\Firefox\Profiles\sfvl9a3c.default -> www.seznam.cz
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-08] ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2018-05-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2018-05-17] (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin HKU\S-1-5-21-217029343-4229803616-1856704772-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin HKU\S-1-5-21-217029343-4229803616-1856704772-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]
FF Plugin HKU\S-1-5-21-217029343-4229803616-1856704772-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [No File]

[pepis09]

ADDITION
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06.06.2018 01
Ran by ss (11-06-2018 11:00:33)
Running from C:\Users\ss\Downloads
Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2018-02-10 09:10:40)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-217029343-4229803616-1856704772-500 - Administrator - Disabled)
Guest (S-1-5-21-217029343-4229803616-1856704772-501 - Limited - Disabled)
ss (S-1-5-21-217029343-4229803616-1856704772-1000 - Administrator - Enabled) => C:\Users\ss

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 30 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0405-1E257A25E34D}) (Version: 9.0 - Název společnosti)
AuthenTec Fingerprint Software (HKLM\...\{560DCF39-61D1-43B0-86DA-5EFF8F7A5144}) (Version: 8.4.4.39 - AuthenTec, Inc.)
Balíček ovladače systému Windows - AuthenTec Inc. (ATSwpWDF) Biometric (12/23/2011 8.4.4.25) (HKLM\...\B04E2F50E30B1E11964CD418CDF70A03C76B3051) (Version: 12/23/2011 8.4.4.25 - AuthenTec Inc.)
FastStone Image Viewer 6.4 (HKLM\...\FastStone Image Viewer) (Version: 6.4 - FastStone Soft)
Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation)
Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.6800 - Broadcom Corporation)
Malwarebytes verze 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
Manager (HKLM\...\{6256D767-63FF-4772-8BA0-05D4922A91A1}) (Version: 4.1.12.37570 - SOBER LEMUR SAS DI VACONDIO ANDREA) Hidden
Microsoft .NET Framework 4.7.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0405-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Mozilla Firefox 60.0.2 (x86 cs) (HKLM\...\Mozilla Firefox 60.0.2 (x86 cs)) (Version: 60.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.0.2.6730 - Mozilla)
RICOH R5U8xx Media Driver ver.3.64.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.64.02 - RICOH)
ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.8.50 - Conexant Systems)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.1 - VideoLAN)
WinSCP 5.11.3 (HKLM\...\winscp3_is1) (Version: 5.11.3 - Martin Prikryl)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {3CB5D01E-6CD9-40C6-9AAB-29140EC7BEAF} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {8377DEF3-A62E-4108-A597-151D312030E6} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {E6A425E0-1F04-4558-B37C-E87E16F07BEF} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-08] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-06-08 12:48 - 2018-04-25 13:16 - 001930960 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-06-08 12:48 - 2018-05-30 09:22 - 001914064 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2018-06-06 07:04 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-217029343-4229803616-1856704772-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\ss\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.3.181 - 188.75.176.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3F9B3D35-1C6A-4BD2-BA04-24E96C0C23C9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0504A701-320A-4A93-B5C2-451E362D314E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0334AFC0-DFF2-444C-88A6-CF216321FFA7}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

==================== Restore Points =========================

07-06-2018 20:15:05 Windows Update
07-06-2018 21:09:11 SlimDrivers Installing Drivers
08-06-2018 07:13:20 SlimDrivers Installing Drivers
08-06-2018 07:18:58 Instalováno NetWaiting
08-06-2018 07:19:37 Instalováno NetWaiting
08-06-2018 07:20:42 Installed Digital Line Detect
08-06-2018 07:21:12 Installed Digital Line Detect
08-06-2018 07:42:04 SlimDrivers Installing Drivers
08-06-2018 07:46:41 Instalováno RICOH R5U8xx Media Driver ver.3.64.02
08-06-2018 07:54:09 Installed AuthenTec Fingerprint Software.
08-06-2018 08:04:03 Broadcom BTW Restore Point
08-06-2018 08:09:26 SlimDrivers Installing Drivers
08-06-2018 13:07:26 Removed SlimDrivers
10-06-2018 22:04:26 Windows Update
11-06-2018 06:15:32 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices =============

Name: Intel(R) WiFi Link 5100 AGN
Description: Intel(R) WiFi Link 5100 AGN
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: netw5v32
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: ThinkPad Bluetooth 2.1 with Enhanced Data Rate
Description: ThinkPad Bluetooth 2.1 with Enhanced Data Rate
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/09/2018 06:26:51 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Windows\system32\svchost.exe -k netsvcs; Popis = Windows Update; Chyba = 0x81000101).

Error: (06/08/2018 06:45:05 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (06/08/2018 06:44:55 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (06/08/2018 06:44:52 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program mmc.exe verze 6.1.7601.23892 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1230

Čas spuštění: 01d3ff46b31fdc00

Čas ukončení: 32

Cesta k aplikaci: C:\Windows\system32\mmc.exe

ID hlášení: 41358a4d-6b3b-11e8-b8c2-001c25949a53

Error: (06/08/2018 06:44:44 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (06/08/2018 06:44:34 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (06/08/2018 06:44:24 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (06/08/2018 06:44:14 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhost (1992) WebCacheLocal: Pokus o otevření souboru C:\Users\ss\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).


System errors:
=============
Error: (06/11/2018 10:44:47 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (06/11/2018 06:35:54 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (06/11/2018 06:35:54 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (06/11/2018 06:26:43 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Klient zásad skupiny se po přijetí pokynu pro vypnutí neukončila správně.

Error: (06/11/2018 06:15:07 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (06/11/2018 04:08:52 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (06/10/2018 10:03:26 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/10/2018 07:29:19 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active


Windows Defender:
===================================
Date: 2018-05-17 21:10:42.893
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=225956
Název:SoftwareBundler:Win32/Stallmonitz
ID:225956
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:containerfile:C:\Users\ss\Downloads\PDFMerger.exe;file:C:\Users\ss\AppData\Local\Temp\nsvE689.tmp\setupPDFMerger.exe;file:C:\Users\ss\Downloads\PDFMerger.exe->(nsis-1-setupPDFMerger.exe);process:pid:3876
Typ zjišťování:Konkrétní
Zdroj zjišťování:Ochrana v reálném čase
Stav:Neznámý
Uživatel:\
Název procesu:

Date: 2018-05-17 21:01:30.249
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=225956
Název:SoftwareBundler:Win32/Stallmonitz
ID:225956
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Users\ss\AppData\Local\Temp\nsvE689.tmp\setupPDFMerger.exe;process:pid:3876
Typ zjišťování:Konkrétní
Zdroj zjišťování:Ochrana v reálném čase
Stav:Neznámý
Uživatel:\
Název procesu:

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Percentage of memory in use: 81%
Total physical RAM: 2025.96 MB
Available physical RAM: 376.64 MB
Total Virtual: 4051.93 MB
Available Virtual: 1718.95 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:137.82 GB) (Free:73.52 GB) NTFS
Drive d: (Lenovo) (Fixed) (Total:9.77 GB) (Free:1.2 GB) NTFS
Drive e: (Moje soubory) (CDROM) (Total:0.68 GB) (Free:0 GB) UDF

\\?\Volume{a6dd0ac5-0e40-11e8-b01f-806e6f6e6963}\ (SERVICEV003) (Fixed) (Total:1.46 GB) (Free:0.67 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: 8BFC66ED)
Partition 1: (Active) - (Size=1.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=137.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=9.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================