Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

malware,spyware

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

malware,spyware

#1 Příspěvek od TIVL »

Zdravim,
mám problém s nějakymi viry, neustálé pop-up okna, AVG virus při startu W7 pořád vyskakuje s hlaškou o virech(soubory jsem smazal ručně), proto prosím o pomoc.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#2 Příspěvek od Rudy »

Zdravím!
Dejte log RSIT: http://forum.viry.cz/viewtopic.php?f=13&t=130786 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#3 Příspěvek od TIVL »

1. část RSIT
Logfile of random's system information tool 1.08 (written by random/random)
Run by Tomas at 2014-05-23 23:10:06
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 273 GB (63%) free of 432 GB
Total RAM: 3959 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:10:57, on 23.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\windows\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Tomas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://auto-blank/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: PAMICO – zástupce.lnk = ?
O4 - Startup: PAMICO.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F20D7DC-1D87-47DA-9A75-D581146F10B7}: NameServer = 85.132.166.13 85.132.166.14
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MgAssist Service (MgAssistService) - Unknown owner - C:\Program Files (x86)\Mobogenie\MgAssist.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12155 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=2e581d0c-4522-477b-8da3-5e252df73259 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\7bb9a807-448f-4f76-a8b8-05168694cd03-1bc-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\Mobogenie\MgAssist.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\windows\SysWOW64\PnkBstrA.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\windows\System32\tcpsvcs.exe
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2176
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
C:\windows\Explorer.EXE
\??\C:\windows\system32\conhost.exe "1944018159-116090888928074633-19695832571854019364865760098-404057314-795204881
"C:\Program Files (x86)\Mobogenie\DaemonProcess.exe"
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
taskeng.exe {65D3CA43-869D-408C-BBAC-2F9F55E95292}
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
ctfmon.exe
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
taskeng.exe {2653E695-A06B-4A8A-9658-462DB9A455C0}
taskeng.exe {04906F31-FB99-4A8F-838A-74E807B9CFFD}
"C:\Users\Tomas\Downloads\install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\AmiUpdXp.job
C:\windows\tasks\G2MUpdateTask-S-1-5-21-3304045183-2485813718-2179730557-1000.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-01 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-01 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2011-05-27 521272]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-10 2176296]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2009-12-17 4367808]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2009-12-17 6988736]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2013-12-10 1100248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2013-12-23 450560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-11-15 1861968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [2014-04-16 748736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeriFaceManager]
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-04-17 329056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tomas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Desktop Lightning.lnk]
C:\PROGRA~2\DESKTO~1\DESKTO~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-03 284696]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-04-06 5180432]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"mobilegeni daemon"=C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [2014-04-16 748736]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PAMICO – zástupce.lnk -
PAMICO.lnk -

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2014-05-23 23:10:06 ----D---- C:\rsit
2014-05-22 23:48:25 ----SHD---- C:\Config.Msi
2014-05-20 00:00:14 ----D---- C:\Program Files (x86)\Mobogenie
2014-05-19 07:23:36 ----D---- C:\s
2014-05-19 07:22:47 ----D---- C:\Program Files\PCDApp
2014-05-19 07:07:49 ----AS---- C:\windows\SYSWOW64\nircmdc.exe
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtmled.dll
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtml.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-05-14 19:31:17 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-05-14 19:31:17 ----A---- C:\windows\system32\shell32.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aepdu.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aeinv.dll
2014-05-14 19:30:55 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 19:30:55 ----A---- C:\windows\system32\lsasrv.dll
2014-05-14 19:30:55 ----A---- C:\windows\system32\kerberos.dll
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-05-14 19:30:52 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\winlogon.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\objsel.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\ntoskrnl.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\msv1_0.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\objsel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\adprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\adprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\SYSWOW64\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\sspicli.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\lsass.exe
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\credssp.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\sspisrv.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\credssp.dll
2014-05-06 15:38:14 ----SD---- C:\windows\system32\CompatTel
2014-05-02 17:48:01 ----D---- C:\Users\Tomas\AppData\Roaming\CFXStorage
2014-05-02 13:03:18 ----D---- C:\Program Files (x86)\Vantage FX Trader
2014-04-27 13:30:37 ----D---- C:\windows\74224F8D4A1748169EDB7BB854DE532C.TMP
2014-04-20 11:28:46 ----A---- C:\windows\SYSWOW64\javaws.exe
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\javaw.exe
2014-04-20 11:28:41 ----A---- C:\windows\SYSWOW64\java.exe
2014-04-19 17:32:31 ----D---- C:\ProgramData\AVG Security Toolbar
2014-04-19 17:32:22 ----D---- C:\Program Files (x86)\AVG SafeGuard toolbar
2014-04-18 15:01:56 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys
2014-04-12 20:56:05 ----A---- C:\windows\SYSWOW64\nvStreaming.exe
2014-04-12 20:45:54 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\NvIFR.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvoglv64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\NvIFR64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\NvFBC.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\NvFBC64.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispgenco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvd3dumx.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuda.dll
2014-04-12 20:45:49 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2014-04-12 20:45:49 ----A---- C:\windows\system32\nvcompiler.dll
2014-04-11 00:36:15 ----D---- C:\ProgramData\MetaQuotes
2014-04-11 00:36:08 ----A---- C:\windows\system32\MetaViewer64.dll
2014-04-11 00:36:02 ----D---- C:\Program Files (x86)\OANDA - MetaTrader
2014-04-11 00:35:48 ----D---- C:\Users\Tomas\AppData\Roaming\MetaQuotes
2014-04-10 01:32:00 ----A---- C:\windows\system32\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\system32\vbscript.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\iernonce.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\ie4uinit.exe
2014-04-10 01:31:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jsproxy.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jscript9diag.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtmsft.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\msfeeds.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\system32\iesetup.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwcollector.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieapfltr.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-04-10 01:31:49 ----A---- C:\windows\system32\iertutil.dll
2014-04-10 01:31:48 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\wininet.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\urlmon.dll
2014-04-10 01:31:47 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-04-10 01:31:47 ----A---- C:\windows\system32\ieframe.dll
2014-04-10 01:31:46 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-04-10 01:31:46 ----A---- C:\windows\system32\jscript9.dll
2014-04-09 23:05:30 ----A---- C:\windows\SYSWOW64\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\storport.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\Diskdump.sys
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\setup16.exe
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64win.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64cpu.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\kernel32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\user.exe
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2014-04-09 23:05:26 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-04-03 16:21:32 ----D---- C:\Program Files (x86)\DsNET Corp
2014-04-03 09:53:43 ----D---- C:\Program Files (x86)\ESET
2014-04-03 09:53:21 ----HD---- C:\windows\AxInstSV
2014-04-03 07:37:05 ----D---- C:\ProgramData\BitRaider
2014-03-31 16:20:54 ----A---- C:\windows\system32\drivers\avgtdia.sys
2014-03-31 16:06:26 ----A---- C:\windows\system32\drivers\avgmfx64.sys
2014-03-27 22:14:26 ----A---- C:\windows\system32\drivers\avgidsha.sys
2014-03-27 22:14:24 ----A---- C:\windows\system32\drivers\avgdiska.sys
2014-03-27 22:07:10 ----A---- C:\windows\system32\drivers\avgldx64.sys
2014-03-27 22:05:02 ----A---- C:\windows\system32\drivers\avgloga.sys
2014-03-27 22:03:16 ----A---- C:\windows\system32\drivers\avgrkx64.sys
2014-03-19 12:31:53 ----D---- C:\Program Files (x86)\Ubisoft
2014-03-16 08:39:08 ----HD---- C:\windows\msdownld.tmp
2014-03-12 20:41:13 ----A---- C:\windows\system32\wwansvc.dll
2014-03-12 20:41:12 ----A---- C:\windows\SYSWOW64\wer.dll
2014-03-12 20:41:12 ----A---- C:\windows\system32\win32k.sys
2014-03-12 20:41:12 ----A---- C:\windows\system32\wer.dll
2014-03-12 20:40:30 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-03-12 20:40:30 ----A---- C:\windows\system32\qedit.dll
2014-03-12 20:40:29 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 20:40:29 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-02-27 23:54:41 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-02-27 23:54:41 ----A---- C:\windows\system32\mstscax.dll
2014-02-27 03:17:58 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\mstsc.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\wksprt.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\system32\mstsc.exe
2014-02-27 03:11:01 ----A---- C:\windows\SYSWOW64\TSWorkspace.dll
2014-02-27 03:11:01 ----A---- C:\windows\system32\TSWorkspace.dll
2014-02-26 03:58:52 ----D---- C:\windows\Migration

======List of files/folders modified in the last 3 months======

2014-05-23 23:10:48 ----D---- C:\Program Files\trend micro
2014-05-23 23:08:58 ----D---- C:\windows\Temp
2014-05-23 23:07:58 ----D---- C:\windows\system32\config
2014-05-23 22:55:00 ----D---- C:\windows\SysWOW64
2014-05-23 22:53:30 ----A---- C:\windows\SYSWOW64\log.txt
2014-05-23 22:53:20 ----D---- C:\ProgramData\NVIDIA
2014-05-23 11:50:37 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2014-05-23 09:50:08 ----D---- C:\ProgramData\MFAData
2014-05-22 23:48:28 ----SHD---- C:\windows\Installer
2014-05-22 23:48:26 ----D---- C:\Users\Tomas\AppData\Roaming\Mozilla
2014-05-22 09:15:35 ----D---- C:\windows\system32\catroot2
2014-05-21 23:37:18 ----D---- C:\ProgramData\Skype
2014-05-21 23:37:14 ----RD---- C:\Program Files (x86)\Skype
2014-05-21 23:37:14 ----D---- C:\Program Files (x86)\Common Files
2014-05-21 12:45:06 ----D---- C:\windows\Prefetch
2014-05-21 12:44:39 ----D---- C:\windows\inf
2014-05-21 12:44:18 ----D---- C:\windows\system32\LogFiles
2014-05-21 12:43:57 ----D---- C:\Windows
2014-05-21 12:43:36 ----AD---- C:\windows\System32
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\uTorrent
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\DAEMON Tools Lite
2014-05-20 00:00:14 ----D---- C:\Program Files (x86)
2014-05-19 23:51:19 ----D---- C:\windows\system32\Tasks
2014-05-19 07:22:47 ----RD---- C:\Program Files
2014-05-19 07:22:34 ----D---- C:\windows\Tasks
2014-05-19 07:03:54 ----D---- C:\Rulez
2014-05-17 22:56:21 ----D---- C:\windows\debug
2014-05-16 23:03:40 ----D---- C:\windows\rescache
2014-05-15 18:54:21 ----D---- C:\windows\Microsoft.NET
2014-05-15 18:53:26 ----RSD---- C:\windows\assembly
2014-05-14 21:02:15 ----D---- C:\windows\winsxs
2014-05-14 20:59:34 ----D---- C:\windows\system32\drivers
2014-05-14 20:59:34 ----D---- C:\windows\system32\cs-CZ
2014-05-14 20:50:58 ----D---- C:\windows\system32\catroot
2014-05-14 20:50:20 ----D---- C:\windows\system32\MRT
2014-05-14 20:47:25 ----A---- C:\windows\system32\MRT.exe
2014-05-14 20:46:19 ----SHD---- C:\System Volume Information
2014-05-14 08:08:30 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-05-11 14:45:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 23:04:11 ----D---- C:\Users\Tomas\AppData\Roaming\TS3Client
2014-05-10 12:18:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-04-23 16:13:27 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-04-23 14:20:11 ----HD---- C:\ProgramData
2014-04-20 20:28:20 ----D---- C:\ProgramData\Microsoft Help
2014-04-20 20:28:18 ----SD---- C:\Users\Tomas\AppData\Roaming\Microsoft
2014-04-20 13:27:28 ----D---- C:\ProgramData\Oracle
2014-04-20 11:28:41 ----D---- C:\Program Files (x86)\Java
2014-04-20 09:55:39 ----RSD---- C:\windows\Fonts
2014-04-20 09:55:29 ----D---- C:\Program Files (x86)\TeamViewer
2014-04-19 16:09:55 ----D---- C:\windows\system32\NDF
2014-04-12 20:56:37 ----D---- C:\temp
2014-04-12 20:56:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-04-12 20:55:42 ----D---- C:\windows\system32\DriverStore
2014-04-12 20:33:04 ----D---- C:\Program Files (x86)\BulkEmailExtractor
2014-04-10 01:33:34 ----D---- C:\Program Files\Internet Explorer
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\en-US
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-04-10 01:33:32 ----D---- C:\windows\system32\en-US
2014-04-10 01:33:32 ----D---- C:\windows\PolicyDefinitions
2014-04-10 01:33:31 ----D---- C:\windows\AppPatch
2014-04-10 01:33:31 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-03 09:53:45 ----D---- C:\windows\Downloaded Program Files
2014-03-29 19:24:16 ----D---- C:\ProgramData\Ubisoft
2014-03-29 19:23:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-03-26 17:01:34 ----D---- C:\windows\Logs
2014-03-16 08:39:22 ----D---- C:\windows\SYSWOW64\directx
2014-03-07 16:30:15 ----D---- C:\Users\Tomas\AppData\Roaming\newnext.me
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvapi.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvwgf2umx.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvapi64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvsvc64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvcpl.dll
2014-03-04 15:05:58 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvvsvc.exe
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvsvcr.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvshext.dll
2014-03-04 15:05:57 ----A---- C:\windows\system32\nvmctray.dll
2014-02-27 03:20:42 ----D---- C:\windows\SYSWOW64\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\drivers\en-US
2014-02-27 03:14:08 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2014-02-27 02:03:35 ----SHD---- C:\$Recycle.Bin
2014-02-26 23:57:20 ----D---- C:\Program Files\Miranda NG
2014-02-26 03:58:52 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2014-03-27 192792]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2014-03-27 324376]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2014-03-31 130840]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2014-03-27 32536]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-03-03 540696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2012-06-20 871408]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2014-03-27 153368]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2014-04-18 237336]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2014-03-27 236824]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2014-03-31 274200]
R1 truecrypt;truecrypt; C:\windows\System32\drivers\truecrypt.sys [2013-05-21 231376]
R1 VBoxDrv;VirtualBox Service; C:\windows\system32\DRIVERS\VBoxDrv.sys [2013-04-12 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-04-12 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2014-04-11 88480]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2014-04-11 46400]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-11-06 1550848]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-08-07 1326928]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-05-27 736896]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 34032]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-06-10 1380400]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\windows\system32\DRIVERS\teamviewervpn.sys [2012-09-12 35112]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-04-12 131856]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\windows\system32\DRIVERS\VBoxNetFlt.sys [2013-04-12 146704]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 andnetadb;ADB Interface DriverNet; C:\windows\System32\Drivers\lgandnetadb.sys [2012-07-03 31744]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\windows\system32\DRIVERS\lgandnetdiag64.sys [2012-07-03 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\windows\system32\DRIVERS\lgandnetmodem64.sys [2012-07-03 36352]
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\windows\system32\DRIVERS\lgandnetndis64.sys [2012-07-04 93184]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
S3 CV2K1;CommView Network Monitor; C:\windows\system32\DRIVERS\cv2k1.sys []
S3 DrvAgent64;DrvAgent64; \??\C:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-06-29 21712]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\windows\system32\DRIVERS\ewusbnet.sys []
S3 huawei_enumerator;huawei_enumerator; C:\windows\system32\DRIVERS\ew_jubusenum.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys []
S3 netr28ux;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista; C:\windows\system32\DRIVERS\netr28ux.sys [2009-06-10 867328]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-12 242720]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\windows\system32\DRIVERS\s116bus.sys [2007-04-03 108296]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s116mdfl.sys [2007-04-03 19720]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s116mdm.sys [2007-04-03 144648]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s116mgmt.sys [2007-04-03 126216]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\windows\system32\DRIVERS\s116nd5.sys [2007-04-03 31496]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s116obex.sys [2007-04-03 123656]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\windows\system32\DRIVERS\s116unic.sys [2007-04-03 130824]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-04-18 3645456]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-03-27 291912]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-04-11 1764992]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MgAssistService;MgAssist Service; C:\Program Files (x86)\Mobogenie\MgAssist.exe [2014-04-16 70848]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2013-07-11 76888]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-02 4972864]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-04-03 477960]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-03-26 543656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-06-26 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#4 Příspěvek od Rudy »

Spusťte tuto utlitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#5 Příspěvek od TIVL »

adwcleaner log:

# AdwCleaner v3.210 - Report created 24/05/2014 at 14:03:24
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Tomas - VIRGILL
# Running from : C:\Users\Tomas\Desktop\adwcleaner_3.210.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : MgAssistService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Security Toolbar
Folder Deleted : C:\Program Files (x86)\AVG SafeGuard toolbar
[x] Not Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\SecretSauce
Folder Deleted : C:\Users\Guest\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Guest\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Tomas\AppData\Local\genienext
[x] Not Deleted : C:\Users\Tomas\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Tomas\AppData\Roaming\newnext.me
[x] Not Deleted : C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
[x] Not Deleted : C:\Users\Tomas\Documents\Mobogenie
[x] Not Deleted : C:\Users\wangjihua\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\dvs0jp2x.default\Extensions\WebSiteRecommendation@weliketheweb.com
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
File Deleted : C:\END
File Deleted : C:\Users\Tomas\daemonprocess.txt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
File Deleted : C:\windows\Tasks\AmiUpdXp.job
File Deleted : C:\windows\System32\Tasks\AmiUpdXp

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EAB5257A-1FB3-474C-9B42-231F52622E72}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\AppDataLow\Software\Headlight
Key Deleted : HKLM\Software\dt soft\daemon tools toolbar
Key Deleted : HKLM\Software\GoforFiles
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v29.0.1 (cs)

[ File : C:\Users\Guest\AppData\Roaming\Mozilla\Firefox\Profiles\ek5nnqbx.default\prefs.js ]


[ File : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\dvs0jp2x.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
Line Deleted : user_pref("extensions.helperbar.LastHiddenTime", 23304258);
Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", true);
Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Line Deleted : user_pref("extensions.helperbar.Visibility", false);

-\\ Google Chrome v35.0.1916.114

[ File : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Deleted [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Deleted [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
Deleted [Extension] : pfndaklgolladniicklehhancnlgocpp

[ File : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={3229509D-5A9C-416A-BD35-13ACEA8B801D}&mid=0ef9367dec0447d08b540d47e705e5d0-a51c32b7c2168a95ddfa13c1b67682a579c8a284&lang=en&ds=ft011&pr=sa&d=2013-01-17 21:24:10&v=15.2.0.5&pid=avg&sg=&sap=dsp&q={searchTerms}
Deleted [Search Provider] : hxxp://websearch.greatresults.info/?l=1&q={searchTerms}

*************************

AdwCleaner[R0].txt - [4715 octets] - [11/02/2014 22:27:20]
AdwCleaner[R1].txt - [7522 octets] - [24/05/2014 13:56:22]
AdwCleaner[S0].txt - [4687 octets] - [11/02/2014 22:29:57]
AdwCleaner[S1].txt - [7397 octets] - [24/05/2014 14:03:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7457 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#6 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#7 Příspěvek od TIVL »

Logfile of random's system information tool 1.08 (written by random/random)
Run by Tomas at 2014-05-24 18:47:47
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 270 GB (62%) free of 432 GB
Total RAM: 3959 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:48:00, on 24.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
C:\windows\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Tomas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://auto-blank/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: PAMICO – zástupce.lnk = ?
O4 - Startup: PAMICO.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F20D7DC-1D87-47DA-9A75-D581146F10B7}: NameServer = 85.132.166.13 85.132.166.14
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11846 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=988f9b6e-9e53-4309-b9e5-b6128c73631d /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\9d886d52-0593-416c-b70d-781d2dcc9237-1c0-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\windows\SysWOW64\PnkBstrA.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\tcpsvcs.exe
"C:\windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2840
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\windows\system32\conhost.exe "133894149715753789591017895422-1136633557-1213628452389497117-880207551-700153115
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
ctfmon.exe
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"taskhost.exe"
taskmgr.exe /3
taskeng.exe {A108BCB1-5CDD-4BE6-BBA2-C3E9C25910AD}
"C:\Users\Tomas\Downloads\install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\G2MUpdateTask-S-1-5-21-3304045183-2485813718-2179730557-1000.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-01 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-01 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2011-05-27 521272]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-10 2176296]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2009-12-17 4367808]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2009-12-17 6988736]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2013-12-10 1100248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2013-12-23 450560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-11-15 1861968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [2014-04-16 748736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeriFaceManager]
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-04-17 329056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tomas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Desktop Lightning.lnk]
C:\PROGRA~2\DESKTO~1\DESKTO~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-03 284696]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-04-06 5180432]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PAMICO – zástupce.lnk -
PAMICO.lnk -

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2014-05-24 13:56:55 ----A---- C:\windows\SYSWOW64\sqlite3.dll
2014-05-23 23:10:06 ----D---- C:\rsit
2014-05-22 23:48:25 ----SHD---- C:\Config.Msi
2014-05-20 00:00:14 ----D---- C:\Program Files (x86)\Mobogenie
2014-05-19 07:23:36 ----D---- C:\s
2014-05-19 07:22:47 ----D---- C:\Program Files\PCDApp
2014-05-19 07:07:49 ----AS---- C:\windows\SYSWOW64\nircmdc.exe
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtmled.dll
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtml.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-05-14 19:31:17 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-05-14 19:31:17 ----A---- C:\windows\system32\shell32.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aepdu.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aeinv.dll
2014-05-14 19:30:55 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 19:30:55 ----A---- C:\windows\system32\lsasrv.dll
2014-05-14 19:30:55 ----A---- C:\windows\system32\kerberos.dll
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-05-14 19:30:52 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\winlogon.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\objsel.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\ntoskrnl.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\msv1_0.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\objsel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\adprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\adprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\SYSWOW64\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\sspicli.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\lsass.exe
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\credssp.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\sspisrv.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\credssp.dll
2014-05-06 15:38:14 ----SD---- C:\windows\system32\CompatTel
2014-05-02 17:48:01 ----D---- C:\Users\Tomas\AppData\Roaming\CFXStorage
2014-05-02 13:03:18 ----D---- C:\Program Files (x86)\Vantage FX Trader
2014-04-27 13:30:37 ----D---- C:\windows\74224F8D4A1748169EDB7BB854DE532C.TMP
2014-04-20 11:28:46 ----A---- C:\windows\SYSWOW64\javaws.exe
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\javaw.exe
2014-04-20 11:28:41 ----A---- C:\windows\SYSWOW64\java.exe
2014-04-18 15:01:56 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys
2014-04-12 20:56:05 ----A---- C:\windows\SYSWOW64\nvStreaming.exe
2014-04-12 20:45:54 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\NvIFR.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvoglv64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\NvIFR64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\NvFBC.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\NvFBC64.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispgenco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvd3dumx.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuda.dll
2014-04-12 20:45:49 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2014-04-12 20:45:49 ----A---- C:\windows\system32\nvcompiler.dll
2014-04-11 00:36:15 ----D---- C:\ProgramData\MetaQuotes
2014-04-11 00:36:08 ----A---- C:\windows\system32\MetaViewer64.dll
2014-04-11 00:36:02 ----D---- C:\Program Files (x86)\OANDA - MetaTrader
2014-04-11 00:35:48 ----D---- C:\Users\Tomas\AppData\Roaming\MetaQuotes
2014-04-10 01:32:00 ----A---- C:\windows\system32\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\system32\vbscript.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\iernonce.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\ie4uinit.exe
2014-04-10 01:31:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jsproxy.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jscript9diag.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtmsft.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\msfeeds.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\system32\iesetup.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwcollector.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieapfltr.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-04-10 01:31:49 ----A---- C:\windows\system32\iertutil.dll
2014-04-10 01:31:48 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\wininet.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\urlmon.dll
2014-04-10 01:31:47 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-04-10 01:31:47 ----A---- C:\windows\system32\ieframe.dll
2014-04-10 01:31:46 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-04-10 01:31:46 ----A---- C:\windows\system32\jscript9.dll
2014-04-09 23:05:30 ----A---- C:\windows\SYSWOW64\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\storport.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\Diskdump.sys
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\setup16.exe
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64win.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64cpu.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\kernel32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\user.exe
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2014-04-09 23:05:26 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-04-03 16:21:32 ----D---- C:\Program Files (x86)\DsNET Corp
2014-04-03 09:53:43 ----D---- C:\Program Files (x86)\ESET
2014-04-03 09:53:21 ----HD---- C:\windows\AxInstSV
2014-04-03 07:37:05 ----D---- C:\ProgramData\BitRaider
2014-03-31 16:20:54 ----A---- C:\windows\system32\drivers\avgtdia.sys
2014-03-31 16:06:26 ----A---- C:\windows\system32\drivers\avgmfx64.sys
2014-03-27 22:14:26 ----A---- C:\windows\system32\drivers\avgidsha.sys
2014-03-27 22:14:24 ----A---- C:\windows\system32\drivers\avgdiska.sys
2014-03-27 22:07:10 ----A---- C:\windows\system32\drivers\avgldx64.sys
2014-03-27 22:05:02 ----A---- C:\windows\system32\drivers\avgloga.sys
2014-03-27 22:03:16 ----A---- C:\windows\system32\drivers\avgrkx64.sys
2014-03-19 12:31:53 ----D---- C:\Program Files (x86)\Ubisoft
2014-03-16 08:39:08 ----HD---- C:\windows\msdownld.tmp
2014-03-12 20:41:13 ----A---- C:\windows\system32\wwansvc.dll
2014-03-12 20:41:12 ----A---- C:\windows\SYSWOW64\wer.dll
2014-03-12 20:41:12 ----A---- C:\windows\system32\win32k.sys
2014-03-12 20:41:12 ----A---- C:\windows\system32\wer.dll
2014-03-12 20:40:30 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-03-12 20:40:30 ----A---- C:\windows\system32\qedit.dll
2014-03-12 20:40:29 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 20:40:29 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-02-27 23:54:41 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-02-27 23:54:41 ----A---- C:\windows\system32\mstscax.dll
2014-02-27 03:17:58 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\mstsc.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\wksprt.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\system32\mstsc.exe
2014-02-27 03:11:01 ----A---- C:\windows\SYSWOW64\TSWorkspace.dll
2014-02-27 03:11:01 ----A---- C:\windows\system32\TSWorkspace.dll
2014-02-26 03:58:52 ----D---- C:\windows\Migration

======List of files/folders modified in the last 3 months======

2014-05-24 18:47:51 ----D---- C:\Program Files\trend micro
2014-05-24 18:46:19 ----D---- C:\windows\Temp
2014-05-24 17:14:40 ----D---- C:\windows\system32\config
2014-05-24 17:12:51 ----D---- C:\Rulez
2014-05-24 14:06:05 ----A---- C:\windows\SYSWOW64\log.txt
2014-05-24 14:05:57 ----D---- C:\ProgramData\NVIDIA
2014-05-24 14:05:48 ----D---- C:\Windows
2014-05-24 14:03:30 ----D---- C:\AdwCleaner
2014-05-24 14:03:27 ----D---- C:\windows\Tasks
2014-05-24 14:03:27 ----D---- C:\windows\system32\Tasks
2014-05-24 14:03:25 ----HD---- C:\ProgramData
2014-05-24 14:03:25 ----D---- C:\Program Files (x86)
2014-05-24 13:56:55 ----D---- C:\windows\SysWOW64
2014-05-24 13:52:58 ----D---- C:\ProgramData\MFAData
2014-05-23 11:50:37 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2014-05-22 23:48:28 ----SHD---- C:\windows\Installer
2014-05-22 23:48:26 ----D---- C:\Users\Tomas\AppData\Roaming\Mozilla
2014-05-22 09:15:35 ----D---- C:\windows\system32\catroot2
2014-05-21 23:37:18 ----D---- C:\ProgramData\Skype
2014-05-21 23:37:14 ----RD---- C:\Program Files (x86)\Skype
2014-05-21 23:37:14 ----D---- C:\Program Files (x86)\Common Files
2014-05-21 12:45:06 ----D---- C:\windows\Prefetch
2014-05-21 12:44:39 ----D---- C:\windows\inf
2014-05-21 12:44:18 ----D---- C:\windows\system32\LogFiles
2014-05-21 12:43:36 ----AD---- C:\windows\System32
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\uTorrent
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\DAEMON Tools Lite
2014-05-19 07:22:47 ----RD---- C:\Program Files
2014-05-17 22:56:21 ----D---- C:\windows\debug
2014-05-16 23:03:40 ----D---- C:\windows\rescache
2014-05-15 18:54:21 ----D---- C:\windows\Microsoft.NET
2014-05-15 18:53:26 ----RSD---- C:\windows\assembly
2014-05-14 21:02:15 ----D---- C:\windows\winsxs
2014-05-14 20:59:34 ----D---- C:\windows\system32\drivers
2014-05-14 20:59:34 ----D---- C:\windows\system32\cs-CZ
2014-05-14 20:50:58 ----D---- C:\windows\system32\catroot
2014-05-14 20:50:20 ----D---- C:\windows\system32\MRT
2014-05-14 20:47:25 ----A---- C:\windows\system32\MRT.exe
2014-05-14 20:46:19 ----SHD---- C:\System Volume Information
2014-05-14 08:08:30 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-05-11 14:45:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 23:04:11 ----D---- C:\Users\Tomas\AppData\Roaming\TS3Client
2014-05-10 12:18:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-04-23 16:13:27 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-04-20 20:28:20 ----D---- C:\ProgramData\Microsoft Help
2014-04-20 20:28:18 ----SD---- C:\Users\Tomas\AppData\Roaming\Microsoft
2014-04-20 13:27:28 ----D---- C:\ProgramData\Oracle
2014-04-20 11:28:41 ----D---- C:\Program Files (x86)\Java
2014-04-20 09:55:39 ----RSD---- C:\windows\Fonts
2014-04-20 09:55:29 ----D---- C:\Program Files (x86)\TeamViewer
2014-04-19 16:09:55 ----D---- C:\windows\system32\NDF
2014-04-12 20:56:37 ----D---- C:\temp
2014-04-12 20:56:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-04-12 20:55:42 ----D---- C:\windows\system32\DriverStore
2014-04-12 20:33:04 ----D---- C:\Program Files (x86)\BulkEmailExtractor
2014-04-10 01:33:34 ----D---- C:\Program Files\Internet Explorer
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\en-US
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-04-10 01:33:32 ----D---- C:\windows\system32\en-US
2014-04-10 01:33:32 ----D---- C:\windows\PolicyDefinitions
2014-04-10 01:33:31 ----D---- C:\windows\AppPatch
2014-04-10 01:33:31 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-03 09:53:45 ----D---- C:\windows\Downloaded Program Files
2014-03-29 19:24:16 ----D---- C:\ProgramData\Ubisoft
2014-03-29 19:23:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-03-26 17:01:34 ----D---- C:\windows\Logs
2014-03-16 08:39:22 ----D---- C:\windows\SYSWOW64\directx
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvapi.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvwgf2umx.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvapi64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvsvc64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvcpl.dll
2014-03-04 15:05:58 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvvsvc.exe
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvsvcr.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvshext.dll
2014-03-04 15:05:57 ----A---- C:\windows\system32\nvmctray.dll
2014-02-27 03:20:42 ----D---- C:\windows\SYSWOW64\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\drivers\en-US
2014-02-27 03:14:08 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2014-02-27 02:03:35 ----SHD---- C:\$Recycle.Bin
2014-02-26 23:57:20 ----D---- C:\Program Files\Miranda NG
2014-02-26 03:58:52 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2014-03-27 192792]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2014-03-27 324376]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2014-03-31 130840]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2014-03-27 32536]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-03-03 540696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2012-06-20 871408]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2014-03-27 153368]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2014-04-18 237336]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2014-03-27 236824]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2014-03-31 274200]
R1 truecrypt;truecrypt; C:\windows\System32\drivers\truecrypt.sys [2013-05-21 231376]
R1 VBoxDrv;VirtualBox Service; C:\windows\system32\DRIVERS\VBoxDrv.sys [2013-04-12 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-04-12 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2014-04-11 88480]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2014-04-11 46400]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-11-06 1550848]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-08-07 1326928]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-05-27 736896]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 34032]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-06-10 1380400]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\windows\system32\DRIVERS\teamviewervpn.sys [2012-09-12 35112]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-04-12 131856]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\windows\system32\DRIVERS\VBoxNetFlt.sys [2013-04-12 146704]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 andnetadb;ADB Interface DriverNet; C:\windows\System32\Drivers\lgandnetadb.sys [2012-07-03 31744]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\windows\system32\DRIVERS\lgandnetdiag64.sys [2012-07-03 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\windows\system32\DRIVERS\lgandnetmodem64.sys [2012-07-03 36352]
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\windows\system32\DRIVERS\lgandnetndis64.sys [2012-07-04 93184]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
S3 CV2K1;CommView Network Monitor; C:\windows\system32\DRIVERS\cv2k1.sys []
S3 DrvAgent64;DrvAgent64; \??\C:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-06-29 21712]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\windows\system32\DRIVERS\ewusbnet.sys []
S3 huawei_enumerator;huawei_enumerator; C:\windows\system32\DRIVERS\ew_jubusenum.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys []
S3 netr28ux;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista; C:\windows\system32\DRIVERS\netr28ux.sys [2009-06-10 867328]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-12 242720]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\windows\system32\DRIVERS\s116bus.sys [2007-04-03 108296]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s116mdfl.sys [2007-04-03 19720]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s116mdm.sys [2007-04-03 144648]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s116mgmt.sys [2007-04-03 126216]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\windows\system32\DRIVERS\s116nd5.sys [2007-04-03 31496]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s116obex.sys [2007-04-03 123656]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\windows\system32\DRIVERS\s116unic.sys [2007-04-03 130824]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-04-18 3645456]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-03-27 291912]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-04-11 1764992]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2013-07-11 76888]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-02 4972864]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-04-03 477960]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-03-26 543656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-06-26 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#8 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files (x86)\Skype\Toolbars
C:\windows\tasks\G2MUpdateTask-S-1-5-21-3304045183-2485813718-2179730557-1000.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3304045183-2485813718-2179730557-1000UA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:services
c2cautoupdatesvc
c2cpnrsvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#9 Příspěvek od TIVL »

novy log RSIT:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Tomas at 2014-05-24 19:12:41
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 270 GB (62%) free of 432 GB
Total RAM: 3959 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:56, on 24.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
C:\windows\SysWOW64\ctfmon.exe
C:\Program Files\trend micro\Tomas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://auto-blank/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: PAMICO – zástupce.lnk = ?
O4 - Startup: PAMICO.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F20D7DC-1D87-47DA-9A75-D581146F10B7}: NameServer = 85.132.166.13 85.132.166.14
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11671 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=c8434331-c5bd-473d-bb0a-846d01934650 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\e6f7886b-1977-4805-90b0-976129c5ca50-1bc-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
taskeng.exe {0D163194-E61F-4F4A-BEED-DAFECEBB2C34}
C:\windows\System32\spoolsv.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\windows\SysWOW64\PnkBstrA.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\tcpsvcs.exe
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3004
"taskhost.exe"
taskeng.exe {65D33706-6433-4EBB-A172-ADEBFD659AD0}
"C:\windows\system32\Dwm.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\windows\system32\conhost.exe "695213514-7595028701872515999-1960198180153587604218816561521038752435-1839621818
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\windows\servicing\TrustedInstaller.exe
C:\windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
taskeng.exe {DAF1B54B-04BE-4E78-A071-8863BBBCA480}
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe"
"C:\Users\Tomas\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
ctfmon.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Users\Tomas\Downloads\install\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-01 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-01 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2011-05-27 521272]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-10 2176296]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2009-12-17 4367808]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2009-12-17 6988736]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2013-12-10 1100248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Tomas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2013-12-23 450560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-11-15 1861968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [2014-04-16 748736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeriFaceManager]
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-04-17 329056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tomas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Desktop Lightning.lnk]
C:\PROGRA~2\DESKTO~1\DESKTO~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-03 284696]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-04-06 5180432]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PAMICO – zástupce.lnk -
PAMICO.lnk -

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2014-05-24 19:06:43 ----D---- C:\_OTM
2014-05-24 13:56:55 ----A---- C:\windows\SYSWOW64\sqlite3.dll
2014-05-23 23:10:06 ----D---- C:\rsit
2014-05-22 23:48:25 ----SHD---- C:\Config.Msi
2014-05-20 00:00:14 ----D---- C:\Program Files (x86)\Mobogenie
2014-05-19 07:23:36 ----D---- C:\s
2014-05-19 07:22:47 ----D---- C:\Program Files\PCDApp
2014-05-19 07:07:49 ----AS---- C:\windows\SYSWOW64\nircmdc.exe
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtmled.dll
2014-05-14 20:50:53 ----A---- C:\windows\system32\mshtml.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2014-05-14 20:50:52 ----A---- C:\windows\SYSWOW64\mshtml.dll
2014-05-14 19:31:17 ----A---- C:\windows\SYSWOW64\shell32.dll
2014-05-14 19:31:17 ----A---- C:\windows\system32\shell32.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aepdu.dll
2014-05-14 19:31:16 ----A---- C:\windows\system32\aeinv.dll
2014-05-14 19:30:55 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2014-05-14 19:30:55 ----A---- C:\windows\system32\lsasrv.dll
2014-05-14 19:30:55 ----A---- C:\windows\system32\kerberos.dll
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2014-05-14 19:30:53 ----A---- C:\windows\SYSWOW64\kerberos.dll
2014-05-14 19:30:52 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\winlogon.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\objsel.dll
2014-05-14 19:30:52 ----A---- C:\windows\system32\ntoskrnl.exe
2014-05-14 19:30:52 ----A---- C:\windows\system32\msv1_0.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\objsel.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\SYSWOW64\adprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\wdigest.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\TSpkg.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\schannel.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\KernelBase.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\drivers\ksecdd.sys
2014-05-14 19:30:51 ----A---- C:\windows\system32\dpapiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\dimsroam.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\cngprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\capiprovider.dll
2014-05-14 19:30:51 ----A---- C:\windows\system32\adprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\SYSWOW64\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\wincredprovider.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\sspicli.dll
2014-05-14 19:30:50 ----A---- C:\windows\system32\lsass.exe
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\sspicli.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\SYSWOW64\credssp.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\sspisrv.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\secur32.dll
2014-05-14 19:30:49 ----A---- C:\windows\system32\credssp.dll
2014-05-06 15:38:14 ----SD---- C:\windows\system32\CompatTel
2014-05-02 17:48:01 ----D---- C:\Users\Tomas\AppData\Roaming\CFXStorage
2014-05-02 13:03:18 ----D---- C:\Program Files (x86)\Vantage FX Trader
2014-04-27 13:30:37 ----D---- C:\windows\74224F8D4A1748169EDB7BB854DE532C.TMP
2014-04-20 11:28:46 ----A---- C:\windows\SYSWOW64\javaws.exe
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-04-20 11:28:42 ----A---- C:\windows\SYSWOW64\javaw.exe
2014-04-20 11:28:41 ----A---- C:\windows\SYSWOW64\java.exe
2014-04-18 15:01:56 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys
2014-04-12 20:56:05 ----A---- C:\windows\SYSWOW64\nvStreaming.exe
2014-04-12 20:45:54 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2014-04-12 20:45:53 ----A---- C:\windows\SYSWOW64\NvIFR.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvopencl.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\nvoglv64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\NvIFR64.dll
2014-04-12 20:45:53 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\NvFBC.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\NvFBC64.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispgenco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvdispco6433523.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvd3dumx.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvid.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuvenc.dll
2014-04-12 20:45:52 ----A---- C:\windows\system32\nvcuda.dll
2014-04-12 20:45:49 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2014-04-12 20:45:49 ----A---- C:\windows\system32\nvcompiler.dll
2014-04-11 00:36:15 ----D---- C:\ProgramData\MetaQuotes
2014-04-11 00:36:08 ----A---- C:\windows\system32\MetaViewer64.dll
2014-04-11 00:36:02 ----D---- C:\Program Files (x86)\OANDA - MetaTrader
2014-04-11 00:35:48 ----D---- C:\Users\Tomas\AppData\Roaming\MetaQuotes
2014-04-10 01:32:00 ----A---- C:\windows\system32\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\vbscript.dll
2014-04-10 01:31:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2014-04-10 01:31:59 ----A---- C:\windows\system32\vbscript.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\iernonce.dll
2014-04-10 01:31:56 ----A---- C:\windows\system32\ie4uinit.exe
2014-04-10 01:31:55 ----A---- C:\windows\system32\ieetwcollectorres.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\msrating.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jsproxy.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\jscript9diag.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtrans.dll
2014-04-10 01:31:54 ----A---- C:\windows\system32\dxtmsft.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iesetup.dll
2014-04-10 01:31:53 ----A---- C:\windows\SYSWOW64\iernonce.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\msfeeds.dll
2014-04-10 01:31:53 ----A---- C:\windows\system32\ieUnatt.exe
2014-04-10 01:31:53 ----A---- C:\windows\system32\iesetup.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2014-04-10 01:31:51 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwproxystub.dll
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieetwcollector.exe
2014-04-10 01:31:50 ----A---- C:\windows\system32\ieapfltr.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\wininet.dll
2014-04-10 01:31:49 ----A---- C:\windows\SYSWOW64\iertutil.dll
2014-04-10 01:31:49 ----A---- C:\windows\system32\iertutil.dll
2014-04-10 01:31:48 ----A---- C:\windows\SYSWOW64\urlmon.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\wininet.dll
2014-04-10 01:31:48 ----A---- C:\windows\system32\urlmon.dll
2014-04-10 01:31:47 ----A---- C:\windows\SYSWOW64\ieframe.dll
2014-04-10 01:31:47 ----A---- C:\windows\system32\ieframe.dll
2014-04-10 01:31:46 ----A---- C:\windows\SYSWOW64\jscript9.dll
2014-04-10 01:31:46 ----A---- C:\windows\system32\jscript9.dll
2014-04-09 23:05:30 ----A---- C:\windows\SYSWOW64\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\iologmsg.dll
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\storport.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\msiscsi.sys
2014-04-09 23:05:30 ----A---- C:\windows\system32\drivers\Diskdump.sys
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\setup16.exe
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\SYSWOW64\kernel32.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64win.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64cpu.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\wow64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\ntvdm64.dll
2014-04-09 23:05:28 ----A---- C:\windows\system32\kernel32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\user.exe
2014-04-09 23:05:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2014-04-09 23:05:26 ----A---- C:\windows\system32\drivers\ntfs.sys
2014-04-03 16:21:32 ----D---- C:\Program Files (x86)\DsNET Corp
2014-04-03 09:53:43 ----D---- C:\Program Files (x86)\ESET
2014-04-03 09:53:21 ----HD---- C:\windows\AxInstSV
2014-04-03 07:37:05 ----D---- C:\ProgramData\BitRaider
2014-03-31 16:20:54 ----A---- C:\windows\system32\drivers\avgtdia.sys
2014-03-31 16:06:26 ----A---- C:\windows\system32\drivers\avgmfx64.sys
2014-03-27 22:14:26 ----A---- C:\windows\system32\drivers\avgidsha.sys
2014-03-27 22:14:24 ----A---- C:\windows\system32\drivers\avgdiska.sys
2014-03-27 22:07:10 ----A---- C:\windows\system32\drivers\avgldx64.sys
2014-03-27 22:05:02 ----A---- C:\windows\system32\drivers\avgloga.sys
2014-03-27 22:03:16 ----A---- C:\windows\system32\drivers\avgrkx64.sys
2014-03-19 12:31:53 ----D---- C:\Program Files (x86)\Ubisoft
2014-03-16 08:39:08 ----HD---- C:\windows\msdownld.tmp
2014-03-12 20:41:13 ----A---- C:\windows\system32\wwansvc.dll
2014-03-12 20:41:12 ----A---- C:\windows\SYSWOW64\wer.dll
2014-03-12 20:41:12 ----A---- C:\windows\system32\win32k.sys
2014-03-12 20:41:12 ----A---- C:\windows\system32\wer.dll
2014-03-12 20:40:30 ----A---- C:\windows\SYSWOW64\qedit.dll
2014-03-12 20:40:30 ----A---- C:\windows\system32\qedit.dll
2014-03-12 20:40:29 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2014-03-12 20:40:29 ----A---- C:\windows\system32\WindowsCodecs.dll
2014-02-27 23:54:41 ----A---- C:\windows\SYSWOW64\mstscax.dll
2014-02-27 23:54:41 ----A---- C:\windows\system32\mstscax.dll
2014-02-27 03:17:58 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\wksprtPS.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TSWbPrxy.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-27 03:17:56 ----A---- C:\windows\system32\tsgqec.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2014-02-27 03:17:56 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\SYSWOW64\mstsc.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\wksprt.exe
2014-02-27 03:17:55 ----A---- C:\windows\system32\rdvidcrl.dll
2014-02-27 03:17:55 ----A---- C:\windows\system32\mstsc.exe
2014-02-27 03:11:01 ----A---- C:\windows\SYSWOW64\TSWorkspace.dll
2014-02-27 03:11:01 ----A---- C:\windows\system32\TSWorkspace.dll
2014-02-26 03:58:52 ----D---- C:\windows\Migration

======List of files/folders modified in the last 3 months======

2014-05-24 19:12:46 ----D---- C:\Program Files\trend micro
2014-05-24 19:09:38 ----D---- C:\windows\Temp
2014-05-24 19:09:37 ----D---- C:\windows\system32\config
2014-05-24 19:09:06 ----A---- C:\windows\SYSWOW64\log.txt
2014-05-24 19:08:56 ----D---- C:\ProgramData\NVIDIA
2014-05-24 19:06:43 ----RD---- C:\Program Files (x86)\Skype
2014-05-24 19:06:43 ----D---- C:\windows\Tasks
2014-05-24 17:12:51 ----D---- C:\Rulez
2014-05-24 14:05:48 ----D---- C:\Windows
2014-05-24 14:03:30 ----D---- C:\AdwCleaner
2014-05-24 14:03:27 ----D---- C:\windows\system32\Tasks
2014-05-24 14:03:25 ----HD---- C:\ProgramData
2014-05-24 14:03:25 ----D---- C:\Program Files (x86)
2014-05-24 13:56:55 ----D---- C:\windows\SysWOW64
2014-05-24 13:52:58 ----D---- C:\ProgramData\MFAData
2014-05-23 11:50:37 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2014-05-22 23:48:28 ----SHD---- C:\windows\Installer
2014-05-22 23:48:26 ----D---- C:\Users\Tomas\AppData\Roaming\Mozilla
2014-05-22 09:15:35 ----D---- C:\windows\system32\catroot2
2014-05-21 23:37:18 ----D---- C:\ProgramData\Skype
2014-05-21 23:37:14 ----D---- C:\Program Files (x86)\Common Files
2014-05-21 12:45:06 ----D---- C:\windows\Prefetch
2014-05-21 12:44:39 ----D---- C:\windows\inf
2014-05-21 12:44:18 ----D---- C:\windows\system32\LogFiles
2014-05-21 12:43:36 ----AD---- C:\windows\System32
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\uTorrent
2014-05-21 08:45:43 ----D---- C:\Users\Tomas\AppData\Roaming\DAEMON Tools Lite
2014-05-19 07:22:47 ----RD---- C:\Program Files
2014-05-17 22:56:21 ----D---- C:\windows\debug
2014-05-16 23:03:40 ----D---- C:\windows\rescache
2014-05-15 18:54:21 ----D---- C:\windows\Microsoft.NET
2014-05-15 18:53:26 ----RSD---- C:\windows\assembly
2014-05-14 21:02:15 ----D---- C:\windows\winsxs
2014-05-14 20:59:34 ----D---- C:\windows\system32\drivers
2014-05-14 20:59:34 ----D---- C:\windows\system32\cs-CZ
2014-05-14 20:50:58 ----D---- C:\windows\system32\catroot
2014-05-14 20:50:20 ----D---- C:\windows\system32\MRT
2014-05-14 20:47:25 ----A---- C:\windows\system32\MRT.exe
2014-05-14 20:46:19 ----SHD---- C:\System Volume Information
2014-05-14 08:08:30 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2014-05-11 14:45:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 23:04:11 ----D---- C:\Users\Tomas\AppData\Roaming\TS3Client
2014-05-10 12:18:54 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-04-23 16:13:27 ----A---- C:\windows\system32\PerfStringBackup.INI
2014-04-20 20:28:20 ----D---- C:\ProgramData\Microsoft Help
2014-04-20 20:28:18 ----SD---- C:\Users\Tomas\AppData\Roaming\Microsoft
2014-04-20 13:27:28 ----D---- C:\ProgramData\Oracle
2014-04-20 11:28:41 ----D---- C:\Program Files (x86)\Java
2014-04-20 09:55:39 ----RSD---- C:\windows\Fonts
2014-04-20 09:55:29 ----D---- C:\Program Files (x86)\TeamViewer
2014-04-19 16:09:55 ----D---- C:\windows\system32\NDF
2014-04-12 20:56:37 ----D---- C:\temp
2014-04-12 20:56:20 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-04-12 20:55:42 ----D---- C:\windows\system32\DriverStore
2014-04-12 20:33:04 ----D---- C:\Program Files (x86)\BulkEmailExtractor
2014-04-10 01:33:34 ----D---- C:\Program Files\Internet Explorer
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\en-US
2014-04-10 01:33:33 ----D---- C:\windows\SYSWOW64\cs-CZ
2014-04-10 01:33:32 ----D---- C:\windows\system32\en-US
2014-04-10 01:33:32 ----D---- C:\windows\PolicyDefinitions
2014-04-10 01:33:31 ----D---- C:\windows\AppPatch
2014-04-10 01:33:31 ----D---- C:\Program Files (x86)\Internet Explorer
2014-04-03 09:53:45 ----D---- C:\windows\Downloaded Program Files
2014-03-29 19:24:16 ----D---- C:\ProgramData\Ubisoft
2014-03-29 19:23:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-03-26 17:01:34 ----D---- C:\windows\Logs
2014-03-16 08:39:22 ----D---- C:\windows\SYSWOW64\directx
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2014-03-04 16:35:23 ----A---- C:\windows\SYSWOW64\nvapi.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\OpenCL.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvwgf2umx.dll
2014-03-04 16:35:23 ----A---- C:\windows\system32\nvapi64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvsvc64.dll
2014-03-04 15:06:00 ----A---- C:\windows\system32\nvcpl.dll
2014-03-04 15:05:58 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvvsvc.exe
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvsvcr.dll
2014-03-04 15:05:58 ----A---- C:\windows\system32\nvshext.dll
2014-03-04 15:05:57 ----A---- C:\windows\system32\nvmctray.dll
2014-02-27 03:20:42 ----D---- C:\windows\SYSWOW64\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\wbem
2014-02-27 03:20:42 ----D---- C:\windows\system32\drivers\en-US
2014-02-27 03:14:08 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2014-02-27 02:03:35 ----SHD---- C:\$Recycle.Bin
2014-02-26 23:57:20 ----D---- C:\Program Files\Miranda NG
2014-02-26 03:58:52 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2014-03-27 192792]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2014-03-27 324376]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2014-03-31 130840]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2014-03-27 32536]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-03-03 540696]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2012-06-20 871408]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2014-03-27 153368]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2014-04-18 237336]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2014-03-27 236824]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2014-03-31 274200]
R1 truecrypt;truecrypt; C:\windows\System32\drivers\truecrypt.sys [2013-05-21 231376]
R1 VBoxDrv;VirtualBox Service; C:\windows\system32\DRIVERS\VBoxDrv.sys [2013-04-12 237840]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-04-12 120080]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2014-04-11 88480]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2014-04-11 46400]
R2 RMCAST;@%SystemRoot%\system32\wshrm.dll,-102; C:\windows\system32\DRIVERS\RMCAST.sys [2010-11-21 146432]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athrx.sys [2009-11-06 1550848]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-08-07 1326928]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-05-27 736896]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 34032]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-06-10 1380400]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\windows\system32\DRIVERS\teamviewervpn.sys [2012-09-12 35112]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-04-12 131856]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\windows\system32\DRIVERS\VBoxNetFlt.sys [2013-04-12 146704]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 andnetadb;ADB Interface DriverNet; C:\windows\System32\Drivers\lgandnetadb.sys [2012-07-03 31744]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\windows\system32\DRIVERS\lgandnetdiag64.sys [2012-07-03 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\windows\system32\DRIVERS\lgandnetmodem64.sys [2012-07-03 36352]
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\windows\system32\DRIVERS\lgandnetndis64.sys [2012-07-04 93184]
S3 BRDriver64;BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
S3 CV2K1;CommView Network Monitor; C:\windows\system32\DRIVERS\cv2k1.sys []
S3 DrvAgent64;DrvAgent64; \??\C:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-06-29 21712]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\windows\system32\DRIVERS\ewusbnet.sys []
S3 huawei_enumerator;huawei_enumerator; C:\windows\system32\DRIVERS\ew_jubusenum.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys []
S3 netr28ux;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista; C:\windows\system32\DRIVERS\netr28ux.sys [2009-06-10 867328]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-12 242720]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 115240]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 19496]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 158760]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 137256]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 34344]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 136744]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 151592]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\windows\system32\DRIVERS\s116bus.sys [2007-04-03 108296]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s116mdfl.sys [2007-04-03 19720]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s116mdm.sys [2007-04-03 144648]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s116mgmt.sys [2007-04-03 126216]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\windows\system32\DRIVERS\s116nd5.sys [2007-04-03 31496]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s116obex.sys [2007-04-03 123656]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\windows\system32\DRIVERS\s116unic.sys [2007-04-03 130824]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 151656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-04-18 3645456]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-03-27 291912]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2014-03-04 922968]
R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2013-07-11 76888]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-03-04 411936]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-02 4972864]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BRSptSvc;BitRaider Mini-Support Service; C:\ProgramData\BitRaider\BRSptSvc.exe [2014-04-03 477960]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-17 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-10 119408]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-03-26 543656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-06-26 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#10 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\Tomas.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (file missing)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#11 Příspěvek od TIVL »

hotovo
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#12 Příspěvek od Rudy »

Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#13 Příspěvek od TIVL »

žádná pop-up okna, vypadá v pohodě, avgui.exe hlasí chyby, poslal jsem report na avg.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: malware,spyware

#14 Příspěvek od Rudy »

AVG případně přeinstalujte, pokud vám tam neporadí něco jiného.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
TIVL
Návštěvník
Návštěvník
Příspěvky: 97
Registrován: 20 led 2007 20:20
Kontaktovat uživatele:
Kontaktovat uživatele TIVL

Re: malware,spyware

#15 Příspěvek od TIVL »

Myslím, že je to už v pořádku. můžeme topic uzavřít.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“