Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Viróza ?

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Viróza ?

#1 Příspěvek od JuraFilth »

Zdravíčko, chtěl jsem se zeptat jestli moje dítko nemá nějakou virózu. Díky moc.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří at 2014-08-01 17:10:42
Microsoft Windows 8.1
System drive C: has 430 GB (66%) free of 647 GB
Total RAM: 8112 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:10:51, on 1. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msi13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msi13.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O2 - BHO: BS Player ControlBar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll
O3 - Toolbar: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [BlueStacks Agent] c:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Battle.net] "C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe" --autostarted
O4 - HKCU\..\Run: [CyberGhost] "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CyberLink Product - 2013/09/13 19:34:24 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\SCM\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12641 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
dashost.exe {3afca9c9-335a-4248-b7509a7fb90ae8c2}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\SCM\MSIService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-60525239-2469-4941-8886-491bf2c730ce -SystemEventPortName:HostProcess-7a3f64c2-72f2-46a2-881d-d3f6afdd25eb -IoCancelEventPortName:HostProcess-e73b453d-5741-4866-98b1-6486b8ae3c7c -NonStateChangingEventPortName:HostProcess-4c58e6e4-78d0-4869-822b-d53b59db0970 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:19e4b11c-7783-4055-8097-85011d263372 -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss e7da4d08-fea4-4864-9ca5-26bab28a932d 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"


winlogon.exe
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
igfxEM.exe
ClassicStartMenu.exe -startup
igfxHK.exe
igfxTray.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\SCM\Radio Manager.exe"
"C:\Program Files (x86)\SCM\SCM.exe"
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\BlueStacks\HD-Agent.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5476.0.1009420042\1129473607" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3621 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5476.2.1277838386\476279026" /prefetch:673131151
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5476.5.652346116\1977926682" /prefetch:673131151
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/NetworkConnectivity/disable_network_stats/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5476.8.2135746272\100938360" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 592 596 604 65536 600
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Jiří\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-21 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-21 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20 440512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player ControlBar Toolbar - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll [2014-03-31 424256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - BS Player ControlBar Toolbar - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll [2014-03-31 424256]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player ControlBar Toolbar - C:\Users\Jiří\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_P.dll [2014-03-31 424256]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-09-12 13538376]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-09-12 2875728]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2013-01-28 452608]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-03-22 36352]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2013-04-23 34432]
"Radio Manager"=C:\Program Files (x86)\SCM\Radio Manager.exe [2013-04-18 406920]
"SCM"=C:\Program Files (x86)\SCM\SCM.exe [2013-04-18 407968]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-07-25 1283136]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2014-04-20 161984]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-04-22 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify"=C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe [2014-07-09 6162488]
"Spotify Web Helper"=C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-07-09 1178168]
"Battle.net"=C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2014-07-25 2869808]
"CyberGhost"=C:\Program Files\CyberGhost 5\CyberGhost.EXE [2014-06-12 404080]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-07-24 3595608]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2012-11-29 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"Super-Charger"=C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2013-02-07 490480]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-09 95192]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2013-04-02 181208]
"BlueStacks Agent"=c:\Program Files (x86)\BlueStacks\HD-Agent.exe [2013-01-08 597880]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-21 3854640]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"WD Drive Unlocker"=C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [2013-10-15 1694072]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2014-05-09 5562736]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK32.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-01 17:10:43 ----D---- C:\Program Files\trend micro
2014-08-01 17:10:42 ----D---- C:\rsit
2014-08-01 12:53:21 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-08-01 11:58:54 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-08-01 11:56:57 ----D---- C:\WINDOWS\LastGood
2014-08-01 11:50:02 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2014-08-01 11:49:14 ----D---- C:\Users\Jiří\AppData\Roaming\Oracle
2014-08-01 11:48:31 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-07-31 13:06:50 ----D---- C:\WINDOWS\SYSWOW64\NV
2014-07-31 13:06:50 ----D---- C:\WINDOWS\system32\NV
2014-07-31 13:03:17 ----D---- C:\WINDOWS\LastGood.Tmp
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispgenco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2014-07-31 12:59:13 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2014-07-31 12:59:13 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2014-07-24 10:46:19 ----D---- C:\Program Files (x86)\Origin Games
2014-07-24 10:45:43 ----D---- C:\Users\Jiří\AppData\Roaming\Origin
2014-07-24 10:44:51 ----D---- C:\ProgramData\Origin
2014-07-24 10:44:50 ----D---- C:\ProgramData\Electronic Arts
2014-07-24 10:44:48 ----D---- C:\Program Files (x86)\Origin
2014-07-23 13:58:40 ----D---- C:\Program Files (x86)\Diablo II
2014-07-23 12:17:26 ----D---- C:\Program Files (x86)\D2LOD-1.12A-enGB
2014-07-13 15:18:55 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-13 15:15:12 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-12 20:54:16 ----D---- C:\Users\Jiří\AppData\Roaming\TS3Client
2014-07-12 20:53:07 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-07-11 01:53:00 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\win32k.sys
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-10 10:40:51 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-10 10:40:48 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-10 10:40:46 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-07-10 10:39:25 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-07-10 10:39:24 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-07-10 10:39:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-07-10 10:39:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-07-10 10:39:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-07-10 10:39:02 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-10 10:39:02 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-10 10:26:34 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-07-08 19:43:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2014-08-01 17:10:50 ----D---- C:\WINDOWS\Prefetch
2014-08-01 17:10:43 ----RD---- C:\Program Files
2014-08-01 17:02:17 ----D---- C:\Users\Jiří\AppData\Roaming\ClassicShell
2014-08-01 17:00:00 ----D---- C:\WINDOWS\system32\sru
2014-08-01 15:28:34 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-01 15:27:55 ----D---- C:\WINDOWS\Temp
2014-08-01 15:27:48 ----HD---- C:\Program Files\WindowsApps
2014-08-01 15:27:48 ----D---- C:\WINDOWS\AppReadiness
2014-08-01 12:53:21 ----RD---- C:\WINDOWS\System32
2014-08-01 12:52:50 ----D---- C:\WINDOWS\system32\drivers
2014-08-01 12:52:50 ----D---- C:\ProgramData\Realtek
2014-08-01 11:58:13 ----D---- C:\WINDOWS\SysWOW64
2014-08-01 11:57:51 ----D---- C:\WINDOWS\system32\catroot
2014-08-01 11:57:35 ----D---- C:\WINDOWS\Inf
2014-08-01 11:57:34 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-01 11:56:57 ----D---- C:\Windows
2014-08-01 11:50:02 ----SHD---- C:\WINDOWS\Installer
2014-08-01 11:50:02 ----RD---- C:\Program Files (x86)
2014-08-01 11:48:42 ----D---- C:\ProgramData\Oracle
2014-08-01 11:48:34 ----D---- C:\Program Files (x86)\Common Files
2014-08-01 11:48:21 ----D---- C:\Program Files (x86)\Java
2014-08-01 11:31:42 ----D---- C:\Program Files (x86)\Hearthstone
2014-07-31 14:06:50 ----SHD---- C:\System Volume Information
2014-07-31 13:06:45 ----D---- C:\ProgramData\NVIDIA
2014-07-31 13:03:18 ----D---- C:\Program Files\NVIDIA Corporation
2014-07-27 19:00:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-26 11:10:51 ----D---- C:\Users\Jiří\AppData\Roaming\Skype
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2014-07-25 14:39:50 ----D---- C:\Program Files (x86)\Battle.net
2014-07-24 10:44:51 ----HD---- C:\ProgramData
2014-07-23 00:21:09 ----D---- C:\WINDOWS\system32\NDF
2014-07-14 07:13:14 ----D---- C:\WINDOWS\rescache
2014-07-14 07:12:53 ----D---- C:\WINDOWS\system32\config
2014-07-13 15:18:57 ----D---- C:\WINDOWS\WinSxS
2014-07-13 15:15:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-07-13 15:15:13 ----D---- C:\WINDOWS\system32\cs-CZ
2014-07-13 15:15:13 ----D---- C:\Program Files\Internet Explorer
2014-07-13 15:15:13 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-13 15:15:12 ----D---- C:\Program Files\Windows Journal
2014-07-13 15:15:11 ----RD---- C:\WINDOWS\ToastData
2014-07-13 15:15:11 ----D---- C:\WINDOWS\WinStore
2014-07-12 16:03:26 ----D---- C:\Users\Jiří\AppData\Roaming\Spotify
2014-07-11 01:56:11 ----D---- C:\WINDOWS\CbsTemp
2014-07-11 01:55:35 ----D---- C:\WINDOWS\system32\MRT
2014-07-11 01:53:56 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-10 10:26:41 ----D---- C:\WINDOWS\system32\catroot2
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvinitx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvapi64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvcpl.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvshext.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvmctray.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2014-07-02 08:46:55 ----D---- C:\Users\Jiří\AppData\Roaming\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-21 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-21 208928]
R0 hiosd;WD Boost Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\hiosd.sys [2013-04-13 173840]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-07-02 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-21 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-21 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-21 423240]
R1 hiofs;WD Boost File System Filter Driver; C:\WINDOWS\system32\DRIVERS\hiofs.sys [2013-04-13 28944]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-21 79184]
R3 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-04-21 84816]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 ETD;@oem11.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-09-12 357200]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-05-16 3791872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-09-12 3425608]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-07 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2013-09-12 32344]
R3 MEIx64;@oem10.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-02-16 64624]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2012-10-26 13368]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256]
R3 nvvad_WaveExtensible;@oem34.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 RtkBtFilter;@oem5.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-01-30 524360]
R3 RTWlanE;@netrtwlane.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E – síťový adaptér; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2013-07-31 1936088]
R3 tap0901;@oem27.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-03-22 678384]
S2 BstHdDrv;BlueStacks Hypervisor; \??\c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2013-01-08 71032]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-07 38296]
S3 IntcDAud;@oem35.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-06-05 450520]
S3 ipadtst;ipadtst; \??\C:\Program Files (x86)\MSI\Super-Charger\ipadtst_64.sys [2013-02-01 19952]
S3 rccfg;AMD-RAID Config Device; C:\WINDOWS\System32\drivers\rccfg.sys [2013-03-28 21680]
S3 rcraid;rcraid; C:\WINDOWS\System32\drivers\rcraid.sys [2013-03-28 526000]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-03-18 167424]
S3 RSUSBSTOR;@oem7.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 WDC_SAM;@oem3.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2013-07-10 14464]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-21 50344]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2013-01-08 384888]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2012-12-07 39424]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-06-05 315352]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-02-15 366552]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [2013-04-18 160768]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2013-02-08 154112]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S2 BstHdAndroidSvc;BlueStacks Android Service; c:\Program Files (x86)\BlueStacks\HD-Service.exe [2013-01-08 393080]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/09/13 19:34:24; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2013-04-03 247768]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-03-22 15344]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-06-05 279000]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
S4 CGVPNCliService;CyberGhost 5 Client Service; C:\Program Files\CyberGhost 5\Service.exe [2014-06-12 64624]
S4 TBSrv;Toolbar Service; C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe [2014-03-31 350528]
S4 WD Boost;WD Boost; C:\Program Files\Western Digital\WD Boost\WDBoost.exe [2013-04-13 55056]
S4 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2014-05-09 1042808]
S4 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2014-05-09 295800]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Re: Viróza ?

#3 Příspěvek od JuraFilth »

# AdwCleaner v3.302 - Report created 01/08/2014 at 19:22:05
# Updated 30/07/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Jiří - JURA
# Running from : C:\Users\Jiří\Desktop\adwcleaner_3.302.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : TBSrv

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Tbccint
Folder Deleted : C:\Program Files (x86)\Tbccint
Folder Deleted : C:\Users\Jiří\AppData\Local\Tbccint
Folder Deleted : C:\Users\Jiří\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Jiří\AppData\LocalLow\Tbccint
File Deleted : C:\END
File Deleted : C:\Users\JI10BB~1\AppData\Local\Temp\Uninstall.exe

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT1750559
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Tbccint
Key Deleted : HKCU\Software\Tbccint_HKLM
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Tbccint
Key Deleted : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Key Deleted : HKLM\Software\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Google Chrome v36.0.1985.125

[ File : C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2784 octets] - [01/08/2014 19:19:50]
AdwCleaner[S0].txt - [2629 octets] - [01/08/2014 19:22:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2689 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Re: Viróza ?

#5 Příspěvek od JuraFilth »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří at 2014-08-01 21:07:56
Microsoft Windows 8.1
System drive C: has 430 GB (66%) free of 647 GB
Total RAM: 8112 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:01, on 1. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Battle.net\Battle.net.4872\Battle.net.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msi13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msi13.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [BlueStacks Agent] c:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Battle.net] "C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe" --autostarted
O4 - HKCU\..\Run: [CyberGhost] "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CyberLink Product - 2013/09/13 19:34:24 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\SCM\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12003 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
dashost.exe {52315d06-f1f6-4806-957eeafd486875d1}
"C:\Program Files (x86)\SCM\MSIService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss e7da4d08-fea4-4864-9ca5-26bab28a932d 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bb8fe2ca-dca9-4345-96a2-bc120b789381 -SystemEventPortName:HostProcess-ef37036b-620f-4c37-9ffc-4d46ed7372b7 -IoCancelEventPortName:HostProcess-eb573638-2bde-442e-8d5f-150bbfc86f4e -NonStateChangingEventPortName:HostProcess-0ebec3a9-ecec-48ca-b96b-bf214bb34f2c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d7acd9a2-8c2a-48d8-ae3b-7acd71945a5a -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"


winlogon.exe
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
taskeng.exe {36673EDF-8726-4350-BA7D-8C8F3F67C27E}
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
igfxEM.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
ClassicStartMenu.exe -startup
igfxHK.exe
igfxTray.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\SCM\Radio Manager.exe"
"C:\Program Files (x86)\SCM\SCM.exe"
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\BlueStacks\HD-Agent.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe" --locale=enGB --session=7115367538170487675
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Battle.net\Battle.net.4872\Battle.net.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Users\Jiří\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-21 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-21 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20 440512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-09-12 13538376]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-09-12 2875728]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2013-01-28 452608]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-03-22 36352]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2013-04-23 34432]
"Radio Manager"=C:\Program Files (x86)\SCM\Radio Manager.exe [2013-04-18 406920]
"SCM"=C:\Program Files (x86)\SCM\SCM.exe [2013-04-18 407968]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-07-25 1283136]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2014-04-20 161984]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-04-22 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify"=C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe [2014-07-09 6162488]
"Spotify Web Helper"=C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-07-09 1178168]
"Battle.net"=C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2014-07-25 2869808]
"CyberGhost"=C:\Program Files\CyberGhost 5\CyberGhost.EXE [2014-06-12 404080]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-07-24 3595608]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2012-11-29 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"Super-Charger"=C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2013-02-07 490480]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-09 95192]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2013-04-02 181208]
"BlueStacks Agent"=c:\Program Files (x86)\BlueStacks\HD-Agent.exe [2013-01-08 597880]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-21 3854640]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"WD Drive Unlocker"=C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [2013-10-15 1694072]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2014-05-09 5562736]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK32.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-01 19:21:17 ----A---- C:\WINDOWS\SYSWOW64\sqlite3.dll
2014-08-01 19:19:47 ----D---- C:\AdwCleaner
2014-08-01 17:10:43 ----D---- C:\Program Files\trend micro
2014-08-01 17:10:42 ----D---- C:\rsit
2014-08-01 12:53:21 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-08-01 11:58:54 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-08-01 11:56:57 ----D---- C:\WINDOWS\LastGood
2014-08-01 11:50:02 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2014-08-01 11:49:14 ----D---- C:\Users\Jiří\AppData\Roaming\Oracle
2014-08-01 11:48:31 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-07-31 13:06:50 ----D---- C:\WINDOWS\SYSWOW64\NV
2014-07-31 13:06:50 ----D---- C:\WINDOWS\system32\NV
2014-07-31 13:03:17 ----D---- C:\WINDOWS\LastGood.Tmp
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispgenco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2014-07-31 12:59:13 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2014-07-31 12:59:13 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2014-07-24 10:46:19 ----D---- C:\Program Files (x86)\Origin Games
2014-07-24 10:45:43 ----D---- C:\Users\Jiří\AppData\Roaming\Origin
2014-07-24 10:44:51 ----D---- C:\ProgramData\Origin
2014-07-24 10:44:50 ----D---- C:\ProgramData\Electronic Arts
2014-07-24 10:44:48 ----D---- C:\Program Files (x86)\Origin
2014-07-23 13:58:40 ----D---- C:\Program Files (x86)\Diablo II
2014-07-23 12:17:26 ----D---- C:\Program Files (x86)\D2LOD-1.12A-enGB
2014-07-13 15:18:55 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-13 15:15:12 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-12 20:54:16 ----D---- C:\Users\Jiří\AppData\Roaming\TS3Client
2014-07-12 20:53:07 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-07-11 01:53:00 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\win32k.sys
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-10 10:40:51 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-10 10:40:48 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-10 10:40:46 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-07-10 10:39:25 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-07-10 10:39:24 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-07-10 10:39:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-07-10 10:39:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-07-10 10:39:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-07-10 10:39:02 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-10 10:39:02 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-10 10:26:34 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-07-08 19:43:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2014-08-01 21:02:00 ----D---- C:\WINDOWS\system32\sru
2014-08-01 20:44:39 ----D---- C:\WINDOWS\Prefetch
2014-08-01 19:26:56 ----D---- C:\WINDOWS\Temp
2014-08-01 19:25:14 ----D---- C:\WINDOWS\system32\wdi
2014-08-01 19:23:32 ----D---- C:\WINDOWS\system32\drivers
2014-08-01 19:23:29 ----D---- C:\ProgramData\Realtek
2014-08-01 19:22:06 ----RD---- C:\Program Files (x86)
2014-08-01 19:22:06 ----HD---- C:\ProgramData
2014-08-01 19:21:17 ----D---- C:\WINDOWS\SysWOW64
2014-08-01 18:08:17 ----D---- C:\Users\Jiří\AppData\Roaming\ClassicShell
2014-08-01 17:10:43 ----RD---- C:\Program Files
2014-08-01 15:28:34 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-01 15:27:48 ----HD---- C:\Program Files\WindowsApps
2014-08-01 15:27:48 ----D---- C:\WINDOWS\AppReadiness
2014-08-01 12:53:21 ----RD---- C:\WINDOWS\System32
2014-08-01 11:57:51 ----D---- C:\WINDOWS\system32\catroot
2014-08-01 11:57:35 ----D---- C:\WINDOWS\Inf
2014-08-01 11:57:34 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-01 11:56:57 ----D---- C:\Windows
2014-08-01 11:50:02 ----SHD---- C:\WINDOWS\Installer
2014-08-01 11:48:42 ----D---- C:\ProgramData\Oracle
2014-08-01 11:48:34 ----D---- C:\Program Files (x86)\Common Files
2014-08-01 11:48:21 ----D---- C:\Program Files (x86)\Java
2014-08-01 11:31:42 ----D---- C:\Program Files (x86)\Hearthstone
2014-07-31 14:06:50 ----SHD---- C:\System Volume Information
2014-07-31 13:06:45 ----D---- C:\ProgramData\NVIDIA
2014-07-31 13:03:18 ----D---- C:\Program Files\NVIDIA Corporation
2014-07-27 19:00:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-26 11:10:51 ----D---- C:\Users\Jiří\AppData\Roaming\Skype
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2014-07-25 14:39:50 ----D---- C:\Program Files (x86)\Battle.net
2014-07-23 00:21:09 ----D---- C:\WINDOWS\system32\NDF
2014-07-14 07:13:14 ----D---- C:\WINDOWS\rescache
2014-07-14 07:12:53 ----D---- C:\WINDOWS\system32\config
2014-07-13 15:18:57 ----D---- C:\WINDOWS\WinSxS
2014-07-13 15:15:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-07-13 15:15:13 ----D---- C:\WINDOWS\system32\cs-CZ
2014-07-13 15:15:13 ----D---- C:\Program Files\Internet Explorer
2014-07-13 15:15:13 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-13 15:15:12 ----D---- C:\Program Files\Windows Journal
2014-07-13 15:15:11 ----RD---- C:\WINDOWS\ToastData
2014-07-13 15:15:11 ----D---- C:\WINDOWS\WinStore
2014-07-12 16:03:26 ----D---- C:\Users\Jiří\AppData\Roaming\Spotify
2014-07-11 01:56:11 ----D---- C:\WINDOWS\CbsTemp
2014-07-11 01:55:35 ----D---- C:\WINDOWS\system32\MRT
2014-07-11 01:53:56 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-10 10:26:41 ----D---- C:\WINDOWS\system32\catroot2
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvinitx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvapi64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvcpl.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvshext.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvmctray.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2014-07-02 08:46:55 ----D---- C:\Users\Jiří\AppData\Roaming\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-21 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-21 208928]
R0 hiosd;WD Boost Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\hiosd.sys [2013-04-13 173840]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-07-02 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-21 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-21 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-21 423240]
R1 hiofs;WD Boost File System Filter Driver; C:\WINDOWS\system32\DRIVERS\hiofs.sys [2013-04-13 28944]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-21 79184]
R3 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-04-21 84816]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 ETD;@oem11.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-09-12 357200]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-05-16 3791872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-09-12 3425608]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-07 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2013-09-12 32344]
R3 MEIx64;@oem10.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-02-16 64624]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2012-10-26 13368]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256]
R3 nvvad_WaveExtensible;@oem34.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 RtkBtFilter;@oem5.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-01-30 524360]
R3 RTWlanE;@netrtwlane.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E – síťový adaptér; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2013-07-31 1936088]
R3 tap0901;@oem27.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-03-22 678384]
S2 BstHdDrv;BlueStacks Hypervisor; \??\c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2013-01-08 71032]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-07 38296]
S3 IntcDAud;@oem35.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-06-05 450520]
S3 ipadtst;ipadtst; \??\C:\Program Files (x86)\MSI\Super-Charger\ipadtst_64.sys [2013-02-01 19952]
S3 rccfg;AMD-RAID Config Device; C:\WINDOWS\System32\drivers\rccfg.sys [2013-03-28 21680]
S3 rcraid;rcraid; C:\WINDOWS\System32\drivers\rcraid.sys [2013-03-28 526000]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-03-18 167424]
S3 RSUSBSTOR;@oem7.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 WDC_SAM;@oem3.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2013-07-10 14464]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-21 50344]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2013-01-08 384888]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2012-12-07 39424]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-06-05 315352]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-02-15 366552]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [2013-04-18 160768]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2013-02-08 154112]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S2 BstHdAndroidSvc;BlueStacks Android Service; c:\Program Files (x86)\BlueStacks\HD-Service.exe [2013-01-08 393080]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/09/13 19:34:24; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2013-04-03 247768]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-03-22 15344]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-06-05 279000]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
S4 CGVPNCliService;CyberGhost 5 Client Service; C:\Program Files\CyberGhost 5\Service.exe [2014-06-12 64624]
S4 WD Boost;WD Boost; C:\Program Files\Western Digital\WD Boost\WDBoost.exe [2013-04-13 55056]
S4 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2014-05-09 1042808]
S4 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2014-05-09 295800]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Re: Viróza ?

#7 Příspěvek od JuraFilth »

raději přidám i z toho OTM

All processes killed
========== FILES ==========
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default.migrated

User: Jiýˇ

User: Jiří
->Temp folder emptied: 1239462877 bytes
->Temporary Internet Files folder emptied: 75760416 bytes
->Java cache emptied: 788325 bytes
->Google Chrome cache emptied: 391440202 bytes
->Flash cache emptied: 544 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 245346381 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 18764884 bytes
RecycleBin emptied: 25074017283 bytes

Total Files Cleaned = 25 793,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Default.migrated

User: Jiýˇ

User: Jiří
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 08012014_213543

Files moved on Reboot...
File move failed. C:\Users\Jiří\AppData\Local\Microsoft\Windows\INetCache\counters.dat scheduled to be moved on reboot.
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024419 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02441a not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02441b not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024437 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024438 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024439 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443a not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443b not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443c not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443d not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443e not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02443f not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024440 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024441 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024442 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024443 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024444 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024445 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024446 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024447 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024448 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024449 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444a not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444b not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444c not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444d not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444e not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02444f not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024450 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024451 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024452 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024453 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024454 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024455 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024456 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024457 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024458 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_024459 not found!
File C:\Users\Jiří\AppData\Local\Google\Chrome\User Data\Default\Cache\f_02445a not found!
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...










tady RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří at 2014-08-01 21:41:31
Microsoft Windows 8.1
System drive C: has 456 GB (70%) free of 647 GB
Total RAM: 8112 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:41:36, on 1. 8. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msi13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msi13.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema] "C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [BlueStacks Agent] c:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKCU\..\Run: [Spotify] "C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Battle.net] "C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe" --autostarted
O4 - HKCU\..\Run: [CyberGhost] "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: CyberLink Product - 2013/09/13 19:34:24 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\SCM\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12020 bytes

======Listing Processes======





wininit.exe


C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe"
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe"
dashost.exe {6d107128-c5ee-4f25-bf505b7abf5d1937}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\SCM\MSIService.exe"
"C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss e7da4d08-fea4-4864-9ca5-26bab28a932d 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b7363949-ef23-4656-b7b2-48d072e5d924 -SystemEventPortName:HostProcess-dbf718de-d5ce-448f-ad6f-18d0cf23677b -IoCancelEventPortName:HostProcess-63017c0b-13d7-442b-b67b-00bdaad8bd59 -NonStateChangingEventPortName:HostProcess-2f034e5c-e26a-4698-a2a8-11f1c3dc1124 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5c1bfaff-9d0a-4acb-b758-6e6c52cc5b9b -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
taskeng.exe {24A4F15B-AB66-4FB8-86E0-ED6701500258}
taskhostex.exe
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
ClassicStartMenu.exe -startup
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 592 596 604 65536 600
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Windows\System32\rundll32.exe" C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
"C:\Program Files (x86)\SCM\Radio Manager.exe"
"C:\Program Files (x86)\SCM\SCM.exe"
"C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe" /r
"C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\BlueStacks\HD-Agent.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5868.0.1870630096\1139160990" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3621 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5868.2.1633748879\201678849" /prefetch:673131151
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5868.5.1282880894\1531426503" /prefetch:673131151
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\skydrive.exe -Embedding

"C:\Users\Jiří\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-21 724512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-21 597816]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20 440512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-09-12 13538376]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-09-12 2875728]
"BtServer"=C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [2013-01-28 452608]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-03-22 36352]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2013-04-23 34432]
"Radio Manager"=C:\Program Files (x86)\SCM\Radio Manager.exe [2013-04-18 406920]
"SCM"=C:\Program Files (x86)\SCM\SCM.exe [2013-04-18 407968]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-07-25 1283136]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2014-04-20 161984]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-04-22 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify"=C:\Users\Jiří\AppData\Roaming\Spotify\Spotify.exe [2014-07-09 6162488]
"Spotify Web Helper"=C:\Users\Jiří\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-07-09 1178168]
"Battle.net"=C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2014-07-25 2869808]
"CyberGhost"=C:\Program Files\CyberGhost 5\CyberGhost.EXE [2014-06-12 404080]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-07-24 3595608]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema"=C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [2012-11-29 711680]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"Super-Charger"=C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2013-02-07 490480]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-09 95192]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2013-04-02 181208]
"BlueStacks Agent"=c:\Program Files (x86)\BlueStacks\HD-Agent.exe [2013-01-08 597880]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-21 3854640]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"WD Drive Unlocker"=C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [2013-10-15 1694072]
"WD Quick View"=C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [2014-05-09 5562736]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK32.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-01 21:35:43 ----D---- C:\_OTM
2014-08-01 19:21:17 ----A---- C:\WINDOWS\SYSWOW64\sqlite3.dll
2014-08-01 19:19:47 ----D---- C:\AdwCleaner
2014-08-01 17:10:43 ----D---- C:\Program Files\trend micro
2014-08-01 17:10:42 ----D---- C:\rsit
2014-08-01 12:53:21 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-08-01 11:58:54 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-08-01 11:56:57 ----D---- C:\WINDOWS\LastGood.Tmp
2014-08-01 11:50:02 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2014-08-01 11:49:14 ----D---- C:\Users\Jiří\AppData\Roaming\Oracle
2014-08-01 11:48:31 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-08-01 11:48:27 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-07-31 13:06:50 ----D---- C:\WINDOWS\SYSWOW64\NV
2014-07-31 13:06:50 ----D---- C:\WINDOWS\system32\NV
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvwgf2um.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglv32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\SYSWOW64\nvoglshim32.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvopencl.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglv64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\nvoglshim64.dll
2014-07-31 12:59:16 ----A---- C:\WINDOWS\system32\drivers\nvpciflt.sys
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvIFR.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\NvFBC.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvEncodeAPI.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\SYSWOW64\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvIFR64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\NvFBC64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispgenco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvdispco6434052.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvd3dumx.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\nvcuda.dll
2014-07-31 12:59:15 ----A---- C:\WINDOWS\system32\drivers\nvlddmkm.sys
2014-07-31 12:59:13 ----A---- C:\WINDOWS\SYSWOW64\nvcompiler.dll
2014-07-31 12:59:13 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2014-07-24 10:46:19 ----D---- C:\Program Files (x86)\Origin Games
2014-07-24 10:45:43 ----D---- C:\Users\Jiří\AppData\Roaming\Origin
2014-07-24 10:44:51 ----D---- C:\ProgramData\Origin
2014-07-24 10:44:50 ----D---- C:\ProgramData\Electronic Arts
2014-07-24 10:44:48 ----D---- C:\Program Files (x86)\Origin
2014-07-23 13:58:40 ----D---- C:\Program Files (x86)\Diablo II
2014-07-23 12:17:26 ----D---- C:\Program Files (x86)\D2LOD-1.12A-enGB
2014-07-13 15:18:55 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-07-13 15:15:12 ----SD---- C:\WINDOWS\system32\CompatTel
2014-07-12 20:54:16 ----D---- C:\Users\Jiří\AppData\Roaming\TS3Client
2014-07-12 20:53:07 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-07-11 01:53:00 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\win32k.sys
2014-07-10 10:40:52 ----A---- C:\WINDOWS\system32\osk.exe
2014-07-10 10:40:51 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-07-10 10:40:48 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-07-10 10:40:46 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-07-10 10:40:46 ----A---- C:\WINDOWS\system32\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-07-10 10:40:45 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-07-10 10:40:44 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-07-10 10:40:43 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-07-10 10:40:15 ----A---- C:\WINDOWS\system32\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-07-10 10:40:14 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\devinv.dll
2014-07-10 10:39:26 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-07-10 10:39:25 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-07-10 10:39:24 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-07-10 10:39:23 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-07-10 10:39:22 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-07-10 10:39:17 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-07-10 10:39:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-07-10 10:39:14 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-07-10 10:39:13 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\wininet.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-07-10 10:39:12 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-07-10 10:39:11 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-07-10 10:39:02 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-07-10 10:39:02 ----A---- C:\WINDOWS\system32\qedit.dll
2014-07-10 10:26:34 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-07-08 19:43:04 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 month======

2014-08-01 21:40:38 ----D---- C:\WINDOWS\Prefetch
2014-08-01 21:40:29 ----D---- C:\WINDOWS\Temp
2014-08-01 21:38:44 ----D---- C:\WINDOWS\system32\drivers
2014-08-01 21:38:43 ----D---- C:\ProgramData\Realtek
2014-08-01 21:38:23 ----D---- C:\Windows
2014-08-01 21:35:44 ----D---- C:\WINDOWS\Tasks
2014-08-01 21:02:00 ----D---- C:\WINDOWS\system32\sru
2014-08-01 19:25:14 ----D---- C:\WINDOWS\system32\wdi
2014-08-01 19:22:06 ----RD---- C:\Program Files (x86)
2014-08-01 19:22:06 ----HD---- C:\ProgramData
2014-08-01 19:21:17 ----D---- C:\WINDOWS\SysWOW64
2014-08-01 18:08:17 ----D---- C:\Users\Jiří\AppData\Roaming\ClassicShell
2014-08-01 17:10:43 ----RD---- C:\Program Files
2014-08-01 15:28:34 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-01 15:27:48 ----HD---- C:\Program Files\WindowsApps
2014-08-01 15:27:48 ----D---- C:\WINDOWS\AppReadiness
2014-08-01 12:53:21 ----RD---- C:\WINDOWS\System32
2014-08-01 11:57:51 ----D---- C:\WINDOWS\system32\catroot
2014-08-01 11:57:35 ----D---- C:\WINDOWS\Inf
2014-08-01 11:57:34 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-01 11:50:02 ----SHD---- C:\WINDOWS\Installer
2014-08-01 11:48:42 ----D---- C:\ProgramData\Oracle
2014-08-01 11:48:34 ----D---- C:\Program Files (x86)\Common Files
2014-08-01 11:48:21 ----D---- C:\Program Files (x86)\Java
2014-08-01 11:31:42 ----D---- C:\Program Files (x86)\Hearthstone
2014-07-31 14:06:50 ----SHD---- C:\System Volume Information
2014-07-31 13:06:45 ----D---- C:\ProgramData\NVIDIA
2014-07-31 13:03:18 ----D---- C:\Program Files\NVIDIA Corporation
2014-07-27 19:00:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-26 11:10:51 ----D---- C:\Users\Jiří\AppData\Roaming\Skype
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspcap.dll
2014-07-25 15:50:29 ----A---- C:\WINDOWS\SYSWOW64\nvspbridge.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspcap64.dll
2014-07-25 15:50:11 ----A---- C:\WINDOWS\system32\nvspbridge64.dll
2014-07-25 14:39:50 ----D---- C:\Program Files (x86)\Battle.net
2014-07-23 00:21:09 ----D---- C:\WINDOWS\system32\NDF
2014-07-14 07:13:14 ----D---- C:\WINDOWS\rescache
2014-07-14 07:12:53 ----D---- C:\WINDOWS\system32\config
2014-07-13 15:18:57 ----D---- C:\WINDOWS\WinSxS
2014-07-13 15:15:13 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-07-13 15:15:13 ----D---- C:\WINDOWS\system32\cs-CZ
2014-07-13 15:15:13 ----D---- C:\Program Files\Internet Explorer
2014-07-13 15:15:13 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-13 15:15:12 ----D---- C:\Program Files\Windows Journal
2014-07-13 15:15:11 ----RD---- C:\WINDOWS\ToastData
2014-07-13 15:15:11 ----D---- C:\WINDOWS\WinStore
2014-07-12 16:03:26 ----D---- C:\Users\Jiří\AppData\Roaming\Spotify
2014-07-11 01:56:11 ----D---- C:\WINDOWS\CbsTemp
2014-07-11 01:55:35 ----D---- C:\WINDOWS\system32\MRT
2014-07-11 01:53:56 ----A---- C:\WINDOWS\system32\MRT.exe
2014-07-10 10:26:41 ----D---- C:\WINDOWS\system32\catroot2
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvumdshim.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvinit.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvd3dum.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\SYSWOW64\nvapi.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvumdshimx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvinitx.dll
2014-07-02 22:48:32 ----A---- C:\WINDOWS\system32\nvapi64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvsvc64.dll
2014-07-02 20:55:43 ----A---- C:\WINDOWS\system32\nvcpl.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvvsvc.exe
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvsvcr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvshext.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nvmctray.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-02 20:55:41 ----A---- C:\WINDOWS\system32\nv3dappshext.dll
2014-07-02 08:46:55 ----D---- C:\Users\Jiří\AppData\Roaming\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-04-21 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-04-21 208928]
R0 hiosd;WD Boost Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\hiosd.sys [2013-04-13 173840]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-07-02 32544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-04-21 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-04-21 1039096]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-04-21 423240]
R1 hiofs;WD Boost File System Filter Driver; C:\WINDOWS\system32\DRIVERS\hiofs.sys [2013-04-13 28944]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-04-21 79184]
R3 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-04-21 84816]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 ETD;@oem11.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-09-12 357200]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-05-16 3791872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-09-12 3425608]
R3 iwdbus;@oem31.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-05-07 27032]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MBfilt;MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [2013-09-12 32344]
R3 MEIx64;@oem10.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-02-16 64624]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2012-10-26 13368]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256]
R3 nvvad_WaveExtensible;@oem34.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 RtkBtFilter;@oem5.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [2013-01-30 524360]
R3 RTWlanE;@netrtwlane.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E – síťový adaptér; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [2013-07-31 1936088]
R3 tap0901;@oem27.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-03-22 678384]
S2 BstHdDrv;BlueStacks Hypervisor; \??\c:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [2013-01-08 71032]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 intaud_WaveExtensible;@oem30.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-05-07 38296]
S3 IntcDAud;@oem35.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-06-05 450520]
S3 ipadtst;ipadtst; \??\C:\Program Files (x86)\MSI\Super-Charger\ipadtst_64.sys [2013-02-01 19952]
S3 rccfg;AMD-RAID Config Device; C:\WINDOWS\System32\drivers\rccfg.sys [2013-03-28 21680]
S3 rcraid;rcraid; C:\WINDOWS\System32\drivers\rcraid.sys [2013-03-28 526000]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-03-18 167424]
S3 RSUSBSTOR;@oem7.inf,%RSUSBSTOR.SvcDesc%;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2012-06-13 252048]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 WDC_SAM;@oem3.inf,%WDC_SAM_ServiceName%;WD SCSI Pass Thru driver; C:\WINDOWS\System32\drivers\wdcsam64.sys [2013-07-10 14464]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-21 50344]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; c:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [2013-01-08 384888]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2012-12-07 39424]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-06-05 315352]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-02-15 366552]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [2013-04-18 160768]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2013-02-08 154112]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S2 BstHdAndroidSvc;BlueStacks Android Service; c:\Program Files (x86)\BlueStacks\HD-Service.exe [2013-01-08 393080]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/09/13 19:34:24; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2013-04-03 247768]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-03-22 15344]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-06-05 279000]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-14 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-05-29 543424]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
S4 CGVPNCliService;CyberGhost 5 Client Service; C:\Program Files\CyberGhost 5\Service.exe [2014-06-12 64624]
S4 WD Boost;WD Boost; C:\Program Files\Western Digital\WD Boost\WDBoost.exe [2013-04-13 55056]
S4 WDBackup;WD Backup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2014-05-09 1042808]
S4 WDDriveService;WD Drive Manager; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2014-05-09 295800]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Re: Viróza ?

#9 Příspěvek od JuraFilth »

můžu se ještě zeptat jestli se dá takhle nějak na dálku zjistit jestli mám správně nainstalované ovladače ?? nebo nějaký program co by to uměl ?? Jinak samozřejmě díky za pomoc a za drahocenný čas, jestli je to teda vše :)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#10 Příspěvek od Rudy »

Správné ovladače poznáte tak, že všechno, co je hardware, správně funguje. Existují programy, které vám zjistí, zda vaše ovladače jsou aktuální, mov jim al nevěříme a nedoporučujeme. Existuje hw, kde je naopak nutný downgrade, aby hw s určitými programy správně pracoval. Podtrženo a sečteno, jestli nemáte problém s hardwarem, nechte ovladače tak, jak jsou.
Jedna poučka říká: co funguje, v tom se nešťourej. :D
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
JuraFilth
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 209
Registrován: 23 črc 2009 16:18
Bydliště: Havířov

Re: Viróza ?

#11 Příspěvek od JuraFilth »

Já si právě nejsem jistý jestli moje grafické ovladače pracují správně
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Viróza ?

#12 Příspěvek od Rudy »

Nějaký konkrétní problém?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Sekce pouze pro Vzorné návštěvníky“