Omlouvám se za zpoždění, tady je LOGLogfile of random's system information tool 1.09 (written by random/random)
Run by Lída at 2013-12-12 19:38:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 263 GB (70%) free of 375 GB
Total RAM: 3532 MB (54% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:39:01, on 12.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Lída.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?tpid=ATU4-V7 ... 08-29&psv=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HMMNET~1] "C:\Users\LDA~1\AppData\Local\Temp\HMMNET~1.VBS"
O4 - HKCU\..\Run: [GYIMTT~1] "C:\Users\LDA~1\AppData\Local\Temp\GYIMTT~1.VBS"
O4 - HKCU\..\Run: [gyimttbobx] "C:\Users\LDA~1\AppData\Local\Temp\gyimttbobx..vbs"
O4 - HKCU\..\Run: [hmmnetrkjq] "C:\Users\LDA~1\AppData\Local\Temp\hmmnetrkjq..vbs"
O4 - HKCU\..\Run: [xiksvkhxzu] "C:\Users\LDA~1\AppData\Local\Temp\xiksvkhxzu..vbs"
O4 - HKCU\..\Run: [icq] C:\Users\Lída\AppData\Roaming\ICQM\icq.exe -CU
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll (file missing)
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: DisplayLinkManager (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SGFX Manager (SGFXMgr) - SMSC - C:\Program Files\SGFX\sgfxmgr.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10398 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe"
atieclxx
"C:\Program Files\SGFX\sgfxmgr.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
"C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe"
"C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" /hidden
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe" -Embedding
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe" -h
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe" -h
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6492.0.1744167195\38539470" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --reduce-gpu-sandbox --gpu-vendor-id=0x1002 --gpu-device-id=0x9992 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.947.1.1000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --channel="6492.1.119587501\1133815925" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="6492.3.2036967027\1101203586" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/RateLimited/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r4 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="6492.4.844959112\1006126767" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe20_ Global\UsGthrCtrlFltPipeMssGthrPipe20 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Lída\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-12-11 1567016]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-11 606544]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-12-11 1567016]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-11 606544]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe [2012-04-11 97280]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe [2012-03-14 15232]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-03-23 2184520]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-17 767312]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"HMMNET~1"=C:\Users\LDA~1\AppData\Local\Temp\HMMNET~1.VBS []
"GYIMTT~1"=C:\Users\LDA~1\AppData\Local\Temp\GYIMTT~1.VBS []
"gyimttbobx"=C:\Users\LDA~1\AppData\Local\Temp\gyimttbobx..vbs []
"hmmnetrkjq"=C:\Users\LDA~1\AppData\Local\Temp\hmmnetrkjq..vbs []
"xiksvkhxzu"=C:\Users\LDA~1\AppData\Local\Temp\xiksvkhxzu..vbs []
"icq"=C:\Users\Lída\AppData\Roaming\ICQM\icq.exe [2013-08-25 27598184]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-08 630952]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-19 371976]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-10-07 4908592]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-09-12 334240]
""= []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-11 3568312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2013-12-11 23:35:44 ----D---- C:\Program Files\HitmanPro
2013-12-11 23:33:51 ----A---- C:\Windows\system32\bootdelete.exe
2013-12-11 23:24:59 ----D---- C:\ProgramData\HitmanPro
2013-12-11 23:18:09 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2013-12-11 23:17:53 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2013-12-11 23:10:38 ----D---- C:\Users\Lída\AppData\Roaming\AVAST Software
2013-12-11 23:09:55 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-12-11 23:09:55 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-12-11 23:09:55 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-12-11 23:09:54 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-12-11 23:09:53 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-12-11 23:09:52 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-12-11 23:09:52 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-12-11 23:09:51 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-12-11 23:09:46 ----A---- C:\Windows\system32\aswBoot.exe
2013-12-11 23:09:42 ----A---- C:\Windows\avastSS.scr
2013-12-11 23:09:09 ----D---- C:\Program Files\AVAST Software
2013-12-11 23:07:59 ----D---- C:\ProgramData\AVAST Software
2013-12-11 22:46:45 ----D---- C:\FRST
2013-12-11 22:39:07 ----SHD---- C:\$RECYCLE.BIN
2013-12-11 22:39:02 ----A---- C:\ComboFix.txt
2013-12-11 21:52:45 ----A---- C:\Windows\zip.exe
2013-12-11 21:52:45 ----A---- C:\Windows\SWSC.exe
2013-12-11 21:52:45 ----A---- C:\Windows\SWREG.exe
2013-12-11 21:52:45 ----A---- C:\Windows\sed.exe
2013-12-11 21:52:45 ----A---- C:\Windows\PEV.exe
2013-12-11 21:52:45 ----A---- C:\Windows\NIRCMD.exe
2013-12-11 21:52:45 ----A---- C:\Windows\MBR.exe
2013-12-11 21:52:45 ----A---- C:\Windows\grep.exe
2013-12-11 21:52:22 ----D---- C:\Qoobox
2013-12-11 21:52:09 ----D---- C:\Windows\erdnt
2013-12-11 20:51:50 ----D---- C:\rsit
2013-12-11 20:51:50 ----D---- C:\Program Files\trend micro
2013-12-06 22:34:55 ----D---- C:\Windows\Minidump
2013-12-04 07:41:05 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-12-04 07:36:50 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-12-04 07:36:50 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\url.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-12-04 07:36:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\wininet.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\urlmon.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-12-04 07:36:43 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-04 07:36:43 ----A---- C:\Windows\system32\msrating.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\msls31.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\msfeedssync.exe
2013-12-04 07:36:43 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\jsIntl.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\iertutil.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-12-04 07:36:43 ----A---- C:\Windows\system32\elshyph.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\wextract.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\webcheck.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\vbscript.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\url.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\pngfilt.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\occache.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\mshtmler.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\mshtmled.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\mshtml.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\mshta.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\msfeeds.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\licmgr10.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\jscript9.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\jscript.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\inseng.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\imgutil.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iexpress.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieui.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iesysprep.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iesetup.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iernonce.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iepeers.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieframe.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\iedkcs32.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ieapfltr.dat
2013-12-04 07:36:42 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-04 07:36:42 ----A---- C:\Windows\system32\icardie.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\dxtrans.dll
2013-12-04 07:36:42 ----A---- C:\Windows\system32\dxtmsft.dll
2013-11-17 17:28:41 ----HD---- C:\ProgramData\CanonIJMyPrinter
2013-11-17 12:00:56 ----HD---- C:\ProgramData\CanonIJSolutionMenu
2013-11-17 12:00:20 ----D---- C:\ProgramData\CanonIJPLM
2013-11-17 11:54:41 ----D---- C:\Program Files\Common Files\CANON
2013-11-17 11:52:26 ----D---- C:\Program Files\Canon
2013-11-17 11:46:41 ----D---- C:\Program Files (x86)\Canon
2013-11-14 08:21:32 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-11-14 08:21:32 ----A---- C:\Windows\system32\crypt32.dll
2013-11-14 08:21:25 ----A---- C:\Windows\system32\drivers\afd.sys
2013-11-14 08:21:23 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-14 08:21:23 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-11-14 08:21:23 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-11-14 08:21:23 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 08:21:23 ----A---- C:\Windows\system32\credui.dll
2013-11-14 08:21:23 ----A---- C:\Windows\system32\authui.dll
2013-11-14 08:21:16 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-11-14 08:21:16 ----A---- C:\Windows\system32\sspicli.dll
2013-11-14 08:21:16 ----A---- C:\Windows\system32\schannel.dll
2013-11-14 08:21:16 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-14 08:21:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-14 08:21:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-14 08:21:16 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-14 08:21:15 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-11-14 08:21:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-11-14 08:21:15 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-11-14 08:21:15 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-14 08:21:15 ----A---- C:\Windows\system32\secur32.dll
2013-11-14 08:21:15 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-14 08:21:15 ----A---- C:\Windows\system32\lsass.exe
2013-11-14 08:21:12 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-11-14 08:21:12 ----A---- C:\Windows\system32\gdi32.dll
2013-11-14 08:21:11 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-11-14 08:21:11 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-11-14 08:21:11 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-14 08:21:11 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-14 08:21:11 ----A---- C:\Windows\system32\FWPUCLNT.DLL
======List of files/folders modified in the last 1 month======
2013-12-12 17:15:06 ----D---- C:\Users\Lída\AppData\Roaming\vlc
2013-12-12 13:22:50 ----D---- C:\Windows\Temp
2013-12-12 09:55:18 ----D---- C:\Windows\system32\config
2013-12-12 09:38:28 ----D---- C:\Windows\system32\catroot
2013-12-12 09:38:26 ----D---- C:\Windows\winsxs
2013-12-12 09:37:56 ----D---- C:\Windows\system32\catroot2
2013-12-11 23:35:44 ----RD---- C:\Program Files
2013-12-11 23:34:11 ----D---- C:\Windows\system32\drivers
2013-12-11 23:33:51 ----D---- C:\Windows\System32
2013-12-11 23:25:24 ----D---- C:\Windows\inf
2013-12-11 23:25:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-11 23:24:59 ----D---- C:\ProgramData
2013-12-11 23:20:23 ----A---- C:\Windows\SYSWOW64\bscs.ini
2013-12-11 23:18:23 ----D---- C:\Windows\system32\DriverStore
2013-12-11 23:18:12 ----D---- C:\Windows\system32\Tasks
2013-12-11 23:18:07 ----D---- C:\Windows
2013-12-11 23:16:20 ----SHD---- C:\System Volume Information
2013-12-11 23:00:31 ----RD---- C:\Program Files (x86)
2013-12-11 23:00:31 ----D---- C:\Windows\system32\drivers\etc
2013-12-11 23:00:31 ----D---- C:\Program Files (x86)\Common Files
2013-12-11 22:36:58 ----A---- C:\Windows\system.ini
2013-12-11 22:33:12 ----D---- C:\Windows\Tasks
2013-12-11 22:08:28 ----D---- C:\Windows\SYSWOW64\drivers
2013-12-11 22:08:28 ----D---- C:\Windows\SysWOW64
2013-12-11 22:08:28 ----D---- C:\Windows\AppPatch
2013-12-11 17:53:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-12-11 13:44:01 ----D---- C:\ProgramData\MFAData
2013-12-10 16:45:29 ----D---- C:\ProgramData\AVG Secure Search
2013-12-08 20:47:59 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2013-12-08 18:41:07 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2013-12-08 17:02:10 ----A---- C:\Windows\SYSWOW64\REMOTEDEVICE.INI
2013-12-07 15:36:30 ----D---- C:\Windows\Prefetch
2013-12-05 18:20:03 ----SHD---- C:\Windows\Installer
2013-12-04 13:09:37 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-04 13:09:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-12-04 13:09:36 ----D---- C:\Program Files\Internet Explorer
2013-12-04 13:09:34 ----D---- C:\Windows\system32\cs-CZ
2013-12-04 13:09:20 ----D---- C:\Windows\SYSWOW64\migration
2013-12-04 13:09:20 ----D---- C:\Windows\SYSWOW64\en-US
2013-12-04 13:09:10 ----D---- C:\Windows\system32\migration
2013-12-04 13:09:10 ----D---- C:\Windows\PolicyDefinitions
2013-12-04 13:09:09 ----D---- C:\Windows\system32\en-US
2013-12-04 07:41:05 ----D---- C:\Windows\Logs
2013-11-25 10:26:24 ----SD---- C:\Users\Lída\AppData\Roaming\Microsoft
2013-11-20 17:54:43 ----D---- C:\Windows\rescache
2013-11-17 11:54:41 ----D---- C:\Program Files\Common Files
2013-11-14 21:00:59 ----D---- C:\Windows\system32\MRT
2013-11-14 20:59:21 ----A---- C:\Windows\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-03-04 78976]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-03-04 38528]
R0 amdkmpfd;AMD PCI Root Bus Lower Filter; C:\Windows\system32\DRIVERS\amdkmpfd.sys [2012-02-01 31872]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-11 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-11 205320]
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-09-02 192824]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-09-02 294712]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-08-20 123704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-09-08 31544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sgfxl;SMSC WDDM Graphics Loader Driver Service; C:\Windows\system32\drivers\sgfxl64.sys [2013-05-02 18168]
R1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [2013-12-11 28184]
R1 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2013-12-11 447888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-11 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-12-11 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-12-11 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-12-11 65264]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2013-09-25 148792]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2013-09-26 57144]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-09-02 241464]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-09-02 212280]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-11-10 46368]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-12-11 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-12-11 84328]
R3 amdhub30;AMD USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\amdhub30.sys [2012-11-29 107688]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-08 10832896]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-08 328192]
R3 amdxhc;AMD USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\amdxhc.sys [2012-11-29 228008]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 BtAudioBusSrv;Ralink Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2011-07-18 25912]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2011-01-31 174168]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-08-24 1885792]
R3 rtbth;RTBTH Bluetooth Device Driver; C:\Windows\system32\DRIVERS\rtbth.sys [2012-10-02 692832]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2011-09-08 508520]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2012-11-28 1866080]
R4 sgfxk;SMSC WDDM Graphics Display Driver Service; C:\Windows\system32\drivers\sgfxk64.sys [2013-05-02 157432]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2012-10-02 48608]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2011-07-06 367976]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;Sony so0101 ADB Interface; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-08 235520]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-11 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-12-11 116776]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-25 301152]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-26 1612552]
R2 DisplayLinkService;DisplayLinkManager; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [2013-05-09 8998800]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2012-12-24 1868432]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-09-12 523680]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 SGFXMgr;SGFX Manager; C:\Program Files\SGFX\sgfxmgr.exe [2013-05-01 8481280]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 153440]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-19 146184]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-09-06 1001376]
S2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [2013-09-25 1358944]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-10-03 3538480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-23 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-23 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-12-04 111616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-25 1255736]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552]
-----------------EOF-----------------
Hacker z egypta sam zapina webku a ovlada notebook
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Hacker z egypta sam zapina webku a ovlada notebook
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
- Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
- Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize
Kód: Vybrat vše
:reg [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HMMNET~1"=- "GYIMTT~1"=- "gyimttbobx"=- "hmmnetrkjq"=- "xiksvkhxzu"=- "icq"=- [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "AMD AVT"=- ""=- [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot] :files C:\Program Files\HitmanPro C:\Windows\system32\bootdelete.exe C:\ProgramData\HitmanPro C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH] [EMPTYJAVA]- Nasledne kliknete na Opravit
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Hacker z egypta sam zapina webku a ovlada notebook
Hotovo, zde je LOG.
All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HMMNET~1 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GYIMTT~1 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gyimttbobx deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hmmnetrkjq deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xiksvkhxzu deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\icq deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AMD AVT scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot\ deleted successfully.
========== FILES ==========
C:\Program Files\HitmanPro folder moved successfully.
File\Folder C:\Windows\system32\bootdelete.exe not found.
C:\ProgramData\HitmanPro\Quarantine folder moved successfully.
C:\ProgramData\HitmanPro\Logs folder moved successfully.
C:\ProgramData\HitmanPro folder moved successfully.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Lída
->Temp folder emptied: 143154 bytes
->Temporary Internet Files folder emptied: 1972060 bytes
->Google Chrome cache emptied: 442282822 bytes
->Flash cache emptied: 1087 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 489066 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 89695574 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 510,00 mb
[EMPTYFLASH]
User: All Users
User: Default
User: Default User
User: Lída
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
[EMPTYJAVA]
User: All Users
User: Default
User: Default User
User: Lída
User: Public
Total Java Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 12132013_102727
Files\Folders moved on Reboot...
C:\Users\Lída\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Lída\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\_avast_\Webshlock.txt not found!
C:\Windows\temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Windows\temp\FXSTIFFDebugLogFile.txt moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AMD AVT scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.
All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HMMNET~1 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GYIMTT~1 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gyimttbobx deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hmmnetrkjq deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xiksvkhxzu deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\icq deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AMD AVT scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot\ deleted successfully.
========== FILES ==========
C:\Program Files\HitmanPro folder moved successfully.
File\Folder C:\Windows\system32\bootdelete.exe not found.
C:\ProgramData\HitmanPro\Quarantine folder moved successfully.
C:\ProgramData\HitmanPro\Logs folder moved successfully.
C:\ProgramData\HitmanPro folder moved successfully.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Lída
->Temp folder emptied: 143154 bytes
->Temporary Internet Files folder emptied: 1972060 bytes
->Google Chrome cache emptied: 442282822 bytes
->Flash cache emptied: 1087 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 489066 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 89695574 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 510,00 mb
[EMPTYFLASH]
User: All Users
User: Default
User: Default User
User: Lída
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0,00 mb
[EMPTYJAVA]
User: All Users
User: Default
User: Default User
User: Lída
User: Public
Total Java Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 12132013_102727
Files\Folders moved on Reboot...
C:\Users\Lída\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Lída\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\_avast_\Webshlock.txt not found!
C:\Windows\temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Windows\temp\FXSTIFFDebugLogFile.txt moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\AMD AVT scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.
Re: Hacker z egypta sam zapina webku a ovlada notebook
Jak se chova ntb??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Hacker z egypta sam zapina webku a ovlada notebook
Vše funguje jak má, moc děkuji. Mam vymazat složky po programech?
Re: Hacker z egypta sam zapina webku a ovlada notebook
Tak jeste uklidime 
Odinstalujte Combofix
T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
Doporucuji kompletni zmenu hesel
A pokud nejsou problemy ci dotazy, je to z me strany vse 
Odinstalujte Combofix
- Prejmenujte ComboFix na Uninstall
- Spustte jej
- Tohle smaze Combofix a jeho slozky
T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Doporucuji kompletni zmenu hesel A pokud nejsou problemy ci dotazy, je to z me strany vse "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?