trojan kryptik

Zpráva

rozbithlavu2 · #1 Příspěvek od **rozbithlavu2** » 18 srp 2014 21:01

Ahoj, mam problem s virem trojan kryptik, poradi nekdo co s tim?

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jose at 2014-08-18 21:56:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 56 GB (6%) free of 954 GB
Total RAM: 8169 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:56:05, on 18.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\ProgramData\Boxtools\Toolbox.exe
C:\Program Files (x86)\QIP\qip.exe
C:\Users\Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\EC Simulator.exe
C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
C:\Program Files\trend micro\Jose.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CrossriderApp0061768 - {11111111-1111-1111-1111-110611171168} - C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - (no file)
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [ASUS ShellProcess Execute] C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [GMouse] "C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE" /hide
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Boxoft Tools] "C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Infium] "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
O4 - HKCU\..\Run: [QIP2005] C:\Program Files (x86)\QIP\qip.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: Dropbox.lnk = Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: GIGABYTE OC_GURU.lnk = C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WinToFlash Suggestor - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O9 - Extra 'Tools' menuitem: WinToFlash Suggestor options - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 13541 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\userinit.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
taskeng.exe {492D3BA8-2F79-4B17-9CA9-B1E93FE243D0}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe"
"C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe"
taskeng.exe {BADC17E9-5953-4443-AE33-51B50BE0DD8B}
"C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe"
"C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-6.exe" /agentregpath='HDtubeV1.6-nv' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='488d1fe8-ef0c-45eb-b312-3119bb133823.dll' /DllName64ToInjectToChrome='d47bc912-582b-4f84-8417-b50b98b27f7a.dll' /nova64bitexe='abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-64.exe' /browsername='nova' /usehklm /crregname='HDtubeV1.6' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 536871169, 536870912],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputdatacloud.com/novaru ... pdate.json' /runfrom='task' /externallog=''
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe" -open
"C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe"
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\ProgramData\Boxtools\Toolbox.exe" -autorun
"C:\Program Files (x86)\QIP\qip.exe"
"C:\Users\Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --flag-switches-begin --flag-switches-end --restore-last-session
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe"
"C:\GIGABYTE FORCE\GIGABYTE FORCE.exe" /hide
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2464.0.1702535199\1467656113" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16,43 --gpu-vendor-id=0x10de --gpu-device-id=0x1200 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.1106 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.1.1077963949\665036598" /prefetch:673131151
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.2.200566160\919454318" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.3.1714128980\2094807816" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.5.680404622\425378091" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.7.1413525010\630621762" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/QueryBoundaryControl_Stable_R6/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_97/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --channel="2464.9.1869526485\1600319974" /prefetch:673131151
"C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
WLIDSvcM.exe 1116
"C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2464.11.132369868\1141141570" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\EC Simulator.exe"
"C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe" -Init
"C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe" -Init
"C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe" -hide
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe" -hide
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Users\Jose\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\9aa7a2f7-3e64-439f-92c8-4dacad98419c.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-4.exe /rawdata=dnqDxDE4N00ZdZswVIOWRrnOwyywOMbXbAOHMUTbMkqQA/jHwBSIy+59g2lnXTmts3ic7OLpu+UaRSYk2sxEKxAg1xcHdhsgSdJUdZKBE5wXt5jsHAtgZc8EBJNq4oUVo4OgpplIrioMutmK0naPxxomA3oDoWxSwkusvW9Rv6NfsGpUj9wcBb8drreUvMyilne8yvFQ3LR6l/eXG3prCD5M1nrnxSagF2SM18mixkScbrIlVf3iMGjt9wikCmiZfwnUlIgMWl/pNUN82hMA7TfvAULPbb9AgBQeGEB6wGsSBAorKU+wA2FVvJm8VdjJD51pG7jQDdCdaEEgxC2jEW4HXqHbHwt7X2b+1pxKjpkEdXRlY2PMe5Vn9bmT2aXwJpUeylx7g6zbQkRQUb+XVPH+89qSg/9W3pwnUHfYeoNAg6/CvYZraHKgKtpzKt7sQ+kIrYGHGJausr1L4jHK1+vy01z8g5UVJEeOwA7Fiz1Xt1RRv9+2Jpxac9/ErKMWJmeILg6bUkCEqQZ27jl8zELSMN7s7DidD6E/WF3hhVKuMhE8QZQRO70NJQSe0MiITyaEM+oKfmOt+IbTqI1PLOVtGXwlq+SzYWteKENl/wXXLiXNyadUK5025XiY8l3r/PqTt3S1m4D4LMtJhtiqDlaOkBOwXrI+Mwx0Iq2uvlWtlcdRk/9q5+JPc02Y8ItoRj4oOVgnvqoZ6+55Jqkxa30XT95TOrIoWQzhRLM+GEvR6pr8l7jzUWZdLJrgiErTlkA9EPZ2hwHU4UjZyv4HzyB/IoiH8F0cWUw7q+de5P+Ej+lfeQsNp9t2sZH9oiSgCkzYrDXRbPoSbFHKex5bzBsTZK7MNrwkmh3OP/5G04ikB0YzfuZZMKtDur8lgTIX50yjBL6APa5lNkY1xehw49IyCtR0dmJ7W+A/t+rid34drbyS+VCT8nyE6yY3UE7bA3FzbyC6N9ShmylnlTjBNYMKOBXqui0qDyH3X4oj4TXWDh20rGxd+V3SZHzHdbMIMQrYFDdNRXbYVfVc/iTp01PWdF06wHJHqm3U6G6JlX/A/Ex+o7C4fOTgu0XIaBCSxhD36YhyCkFSdmQN1grQvc7ap3kj6zmBw+sBkg7DuwcAhxxmgN0HQG4VqJyM9xZItIzjued5ZKQ7lov8dJFx6XEOoP+GwaDQW702jUfhMd9zKYBCqn6LZU8yaUMS9lYwMjoH3Org5a5msjxMTxHKAhZzAxzrD5p4V5U2GR4TnxODDL7GJtRnGi3YSxkOZkUr1TFyoYZdwUtam7VLbv7xgoxgWfJv+5TvOTGWLpvUc+zKkhHisuQ87UVJc0iXCCNsA6tjdrSeAzYJwxYF658dqwcIRIowawjfRKDZpt0isSUSInlhS82gqHHVV4aDW9h010qQo2YjekqlUd1VrlXdWY6UdLh1NiRDZhKK/zkA1cXxlSXKytqsakSZPMnJPwqXaG6r/FFw+UhCF30Cdi1wdiPuGRfLE19B+y9Iih2Vpo7Jhx7+amonMqjNdS4XenV9Un49rakrOr21H2nfGzf0R/WuHE7PPaKowntzeeqCPpWtqprDl7eYRzFMwbIzyEdZh0FPuNne7ieOtFJ168VhsKfbokpP+WXN+qV04zYDpElalIVwjItAGgZPf3ag/sJIdHQb7gka92y6dH3luUODI/0hE1a5E+zFy7Rtv3VBo4c=
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-1.job - C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='HDtubeV1.6' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /crregname='HDtubeV1.6' /fbcodedownloaddomain=http://js.clientdemocloud.com /allusers /addinfojson='{"asw":[0, 536871169, 536870912],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputdatacloud.com/ie_cod ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-11.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-11.exe /rawdata=PcJlCwGGGNHYJkO5KFBv8HHoljkMse3/ocsfRLS1AI9PQzOI8pzxyHSbmc1C4W1Otgph3fquSZBHv8+TKe3nTbphOhSoX29DAhrN2WZjjr04QxP8jItc0ZbF07Jo4UiWfloMsTeqkLYiGHC01UGqsqxMqkiczQtt99xxIbVik50Qp0+en1ev0UO+Qtach+lIfvRSymNZ5Xj23re3frXvu04gvzdN02r9nFN0ppsVLaWx/1jgJpi3x5niZDTHLfftjTozsgzu3h/S7FOxN1PDFvoFerqwllf6zjDh9fdL3FeyLpFyvdlIdeshQLwYkFpOWbGStp7t/dKwzZjLDkQwo7Em2IPQXJPlvdVo3waivJ0BwoE2TxARlbQxLgMsv1g+0SZuCikQvBONN5pfWpbGLDLV+N19JNuUqF9QezJRjMgeeOTYkHc3ND0QGfAqpqdyfq6D4uShKePPrHdW/6pJXhCw+BqZPYXRIkuKBlSSgO30QyDhWBbbvocs7+LPdgB9Zcuhlv1e7uMYgFphGri28D9sgwZ4hFT5601DBxZUCvM/Ysa2jkZj9V3nwq7Fv0RLC9SALwZDMy8TnEkaoFh1JRud4kynm1USkUwkuzJNdhlB49ndMnH9cFNt8NXbasri75C0QOW0R3O36H09VWBJpOTB3EKp0tX14HaDfaA0egq1YXzs405FUExeMKurUNvqc/mGcFlTTxYdWC6Qksy/Y/HDsJsLtcizLl5PA1814TtkS9ExgHI0ie0DCCYvuwLm72rS9rhD+lSTKd8cSLRBrYqJRs6Pm4DNNWApb4qzteGyv02V8WWPLxcoXfJZHle1CVHU6Ugn+oB9hGhC7l8yRZsjMMHKPiIe5HPcxH5D4PhQB7hksY9/Tq9UqB1034B5o9vfw61Xo0nRst9WXJGtqcBKzJNDN/fa3IXXTDIYdh4dD7jvS+NKmBbCn8Sk0HVpMhQPSa8Qe5klPaIIOD6XyUh1RD9ESx5C7jnr10O+LuOPrhAbG1d6uXKMTtmjxWhylpFtaBpdvqo5kRzbwudL6RmvfpBpyw55yTz9yD68e1hHMj4YqOBe2rdo810jZcYUZZp913KGWOYnyjLiROL9P74xRrtT7lyOMMzUCjSLIus/gbjmlX3AzGL5oqzttT0BiT+fSyrsgBTsDpylPppgvLqEZFy1/d/8K/NAR441On4H0PbdIb3hjK13Zu8hiYFkelKeYD+I+Y5mW9dCCg3hkqOFhy+ZC5jUrWkwSOTBWeTrrYi9O2ja8GbeMERufFuQQUWeihtFcTQuOGn+cbJgYldDRG6n2A0sxmIKPhLum5Prfp+G913n1+7mrEu6Wx4SJGBcitA2jmn/PivDbD5AGJ5ldhI2QszgLRMv6uhfVQozUXXBvTU1E+3DZ6kSEdopvSqe0JhJtaYM4GtjnPwCv5i1MGu+BVL3AKsI2wMSFR21Zr3xjVyxJlZv+JZ3k6huGkgbp9s7Ql7jqhyoj5LG6SHzSrmONaFO3Vfg/3iZvHcfLrHLqmt8vnPG6pPW8LVIgSgFjQq492lgcceTPHChdfv/ZBpt46GaSff/rrH7aP7FXQWWdeXaz+QRnETXcw5MbpQa3ec0+e85S2Z/FdmK1+TB8TR/NmBVy0DgUSlPYGl7yjzWOyzysQ/k99sktXLIWeVHNdeqyfAErw02zEveHE31SaPHTtltsiUc15TBopFaDwLmzA7aZRNpCToWGfGFrrwuYTkD6bihSbpK+7I2YmvOPSbvBe6jsUaOM7Npqk82qNycGK79QZ2YxOQHshKi2zAOVovkw/s3lVaUCUy86Pk9qUplhzk1Af+0zkHSxrhvutk0mwqPEhY28y30sTdsI183RgCF12+2N6M9zlJpbapCo9QIByWWPqt07Z7xVKyXuXSdWF0N8ts3c+a3WR9aCNPjQfmJCTgjznDwrS39IoHacNEnRke37BRU1F9u9h3uXwyKxAIZgFq1fDUp16oyKdi5hSIPlZoVgvPCd+DJ45BF+lrkwkFRZOmsSqPyU3LXS/NAHX1Mh0EW4xKf8agH
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-2.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-2.exe /enablebho /agentregpath='HDtubeV1.6' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /bhoguid=11111111-1111-1111-1111-110611171168 /defbro=ch /useiepol /allusers /autoupdateulr='http://update.inputdatacloud.com/ie_ena ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-3.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-3.exe /rawdata=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
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-4.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-4.exe /installxpi /agentregpath='HDtubeV1.6' /extensionfilepath='C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6.xpi' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /waitforbrowser=300 /extensionid=CUFCV96103896@VLCZ37079202.com /extensionversion=0.95 /prefsbranch=aCUFCV96103896VLCZ37079202com61768 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /61768.rdf /extensionname='HDtubeV1.6' /extensiondesc='Turn YouTube videos to High Definition by default' /publishername='HDTube' /defbro=ch /sid=S-1-5-21-4151458990-3383436761-1323320495-1000 /addinfojson='{"asw":[0, 536871169, 536870912],"browser_name":"__BROWSER_NAME__"}' /allusers /allprofiles /checkfflist /autoupdateulr='http://update.inputdatacloud.com/ff_age ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5.exe /runupdater /agentregpath='HDtubeV1.6' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputdatacloud.com /sid=S-1-5-21-4151458990-3383436761-1323320495-1000 /updaterversion=3 /monetizationdomain=http://logs.inputdatacloud.com /autoupdateulr='http://update.inputdatacloud.com/update ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5_user.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5.exe /runupdater /agentregpath='HDtubeV1.6' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputdatacloud.com /sid=S-1-5-21-4151458990-3383436761-1323320495-1000 /updaterversion=3 /monetizationdomain=http://logs.inputdatacloud.com /autoupdateulr='http://update.inputdatacloud.com/update ... pdate.json' /usertask /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-6.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-6.exe /agentregpath='HDtubeV1.6-nv' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='488d1fe8-ef0c-45eb-b312-3119bb133823.dll' /DllName64ToInjectToChrome='d47bc912-582b-4f84-8417-b50b98b27f7a.dll' /nova64bitexe='abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-64.exe' /browsername='nova' /usehklm /crregname='HDtubeV1.6' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 536871169, 536870912],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputdatacloud.com/novaru ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-7.job - C:\Program Files (x86)\HDtubeV1.6\abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-7.exe /updateapp /agentregpath='HDtubeV1.6-nv' /appid=61768 /srcid='001700' /subid='0' /zdata='0' /bic=B7232EFBF1C84E5699786EDCC5AF4DD7IE /verifier=2b83193dfa89497296f2e7a681ca0f21 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408388667 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ch /DllName32ToInjectToChrome='488d1fe8-ef0c-45eb-b312-3119bb133823.dll' /DllName64ToInjectToChrome='d47bc912-582b-4f84-8417-b50b98b27f7a.dll' /nova64bitexe='abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-64.exe' /browsername='nova' /usehklm /crregname='HDtubeV1.6' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 536871169, 536870912],"browser_name":"__BROWSER_NAME__"}' /runfrom=task /autoupdateulr='http://update.inputdatacloud.com/novaco ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job - C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job - C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job - C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job - C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job - C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171168}]
HDtubeV1.6 - C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho64.dll [2014-08-18 785776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-18 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll [2011-11-08 79240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171168}]
HDtubeV1.6 - C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho.dll [2014-08-18 582512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{432dd630-7e03-4c97-9d62-b99f52df4fc2}]
Microsoft Web Test Recorder 12.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05 71520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2010-10-27 60576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-18 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{EFEED92A-A33D-4873-BA8F-32BAA631E54D}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-02 11545192]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-10-27 613536]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-15 190536]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Boxoft Tools"=C:\ProgramData\Boxtools\Boxofttoolbox.exe [2010-12-15 514048]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]
"AdobeBridge"= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Infium"=C:\Program Files (x86)\QIP 2012\qip.exe /autorun []
"QIP2005"=C:\Program Files (x86)\QIP\qip.exe [2010-10-29 3330560]
"Google Update"=C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-06 136176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"ASUS ShellProcess Execute"=C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [2010-09-28 252544]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"GMouse"=C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [2011-11-08 667648]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-07-21 3816784]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-18 4085896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GIGABYTE OC_GURU.lnk - C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe

C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HideSCAHealth"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"mixer5"=wdmaud.drv
"midi5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux1"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-08-18 21:42:08 ----SHD---- C:\Config.Msi
2014-08-18 21:29:45 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-08-18 21:29:45 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-08-18 21:29:44 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-08-18 21:29:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-08-18 21:29:44 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-08-18 21:29:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-08-18 21:29:43 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-08-18 21:29:42 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-08-18 21:29:20 ----A---- C:\Windows\avastSS.scr
2014-08-18 21:28:25 ----D---- C:\Program Files\AVAST Software
2014-08-18 21:07:12 ----D---- C:\ProgramData\Oracle
2014-08-18 21:06:59 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-18 21:06:36 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-08-18 21:04:36 ----D---- C:\Program Files (x86)\globalUpdate
2014-08-18 21:04:34 ----D---- C:\Program Files (x86)\HDtubeV1.6
2014-08-13 10:22:54 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-08-13 10:22:54 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-08-13 10:22:54 ----A---- C:\Windows\system32\infocardapi.dll
2014-08-13 10:22:54 ----A---- C:\Windows\system32\icardagt.exe
2014-08-13 10:22:53 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-08-13 10:22:53 ----A---- C:\Windows\system32\icardres.dll
2014-08-13 10:22:37 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-13 10:22:37 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-13 10:19:36 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-08-13 00:42:48 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-13 00:42:48 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-13 00:42:44 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-08-13 00:42:44 ----A---- C:\Windows\system32\tzres.dll
2014-08-13 00:42:11 ----A---- C:\Windows\system32\msi.dll
2014-08-13 00:42:10 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-13 00:42:10 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-13 00:42:10 ----A---- C:\Windows\system32\authui.dll
2014-08-13 00:42:09 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-13 00:42:09 ----A---- C:\Windows\system32\msihnd.dll
2014-08-13 00:42:09 ----A---- C:\Windows\system32\consent.exe
2014-08-13 00:41:57 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-13 00:41:54 ----A---- C:\Windows\system32\win32k.sys
2014-08-13 00:41:53 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-13 00:41:53 ----A---- C:\Windows\system32\gdi32.dll
2014-08-13 00:41:52 ----A---- C:\Windows\system32\shell32.dll
2014-08-13 00:41:51 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-13 00:41:36 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-13 00:41:36 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 00:41:36 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-13 00:41:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-13 00:41:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-13 00:41:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-13 00:41:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-13 00:41:35 ----A---- C:\Windows\system32\urlmon.dll
2014-08-13 00:41:35 ----A---- C:\Windows\system32\iernonce.dll
2014-08-13 00:41:35 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 00:41:35 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-13 00:41:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-08-13 00:41:34 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-13 00:41:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-13 00:41:34 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-13 00:41:34 ----A---- C:\Windows\system32\iesetup.dll
2014-08-13 00:41:34 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-13 00:41:34 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-13 00:41:34 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-13 00:41:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-13 00:41:33 ----A---- C:\Windows\system32\iertutil.dll
2014-08-13 00:41:32 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-13 00:41:32 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-13 00:41:32 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-13 00:41:31 ----A---- C:\Windows\system32\ieui.dll
2014-08-13 00:41:31 ----A---- C:\Windows\system32\ieframe.dll
2014-08-13 00:41:31 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-13 00:41:30 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-13 00:41:30 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-13 00:41:30 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-13 00:41:30 ----A---- C:\Windows\system32\jscript9.dll
2014-08-13 00:41:30 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-13 00:41:29 ----A---- C:\Windows\system32\wininet.dll
2014-08-13 00:41:29 ----A---- C:\Windows\system32\vbscript.dll
2014-08-13 00:41:29 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-13 00:41:26 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 00:41:26 ----A---- C:\Windows\system32\msrating.dll
2014-08-13 00:41:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-13 00:41:25 ----A---- C:\Windows\system32\mshtml.dll
2014-08-13 00:41:06 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-13 00:41:06 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-13 00:41:03 ----A---- C:\Windows\system32\aepdu.dll
2014-08-13 00:41:02 ----A---- C:\Windows\system32\aeinv.dll
2014-08-03 22:02:26 ----D---- C:\Program Files (x86)\Snowblind Studios
2014-07-31 22:13:17 ----A---- C:\Windows\ipuninst.exe
2014-07-31 22:13:11 ----D---- C:\Program Files\Tantrum

======List of files/folders modified in the last 1 month======

2014-08-18 21:56:02 ----D---- C:\Windows\temp
2014-08-18 21:56:02 ----D---- C:\Program Files\trend micro
2014-08-18 21:53:14 ----D---- C:\Users\Jose\AppData\Roaming\Dropbox
2014-08-18 21:50:39 ----D---- C:\ProgramData\NVIDIA
2014-08-18 21:48:58 ----D---- C:\Windows\system32\config
2014-08-18 21:48:46 ----SHD---- C:\Windows\Installer
2014-08-18 21:47:28 ----D---- C:\ProgramData
2014-08-18 21:47:13 ----RD---- C:\Program Files
2014-08-18 21:44:09 ----D---- C:\Windows\system32\DriverStore
2014-08-18 21:44:09 ----D---- C:\Windows\system32\catroot
2014-08-18 21:44:07 ----D---- C:\Windows\system32\drivers
2014-08-18 21:44:07 ----D---- C:\Windows\inf
2014-08-18 21:36:11 ----D---- C:\Windows\Prefetch
2014-08-18 21:34:54 ----D---- C:\ProgramData\Boxtools
2014-08-18 21:29:50 ----D---- C:\Windows\system32\Tasks
2014-08-18 21:29:39 ----D---- C:\Windows
2014-08-18 21:29:20 ----A---- C:\Windows\system32\aswBoot.exe
2014-08-18 21:28:25 ----D---- C:\ProgramData\AVAST Software
2014-08-18 21:28:17 ----SHD---- C:\System Volume Information
2014-08-18 21:07:23 ----D---- C:\Program Files (x86)\Common Files
2014-08-18 21:07:03 ----D---- C:\Windows\SysWOW64
2014-08-18 21:06:54 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-08-18 21:06:53 ----A---- C:\Windows\SYSWOW64\java.exe
2014-08-18 21:05:21 ----D---- C:\Windows\Tasks
2014-08-18 21:04:36 ----RD---- C:\Program Files (x86)
2014-08-18 20:36:54 ----D---- C:\Users\Jose\AppData\Roaming\eM Client
2014-08-16 20:42:23 ----D---- C:\Users\Jose\AppData\Roaming\DAEMON Tools Lite
2014-08-14 10:11:55 ----D---- C:\Users\Jose\AppData\Roaming\uTorrent
2014-08-13 16:22:50 ----D---- C:\Windows\rescache
2014-08-13 15:55:24 ----D---- C:\Windows\Microsoft.NET
2014-08-13 15:54:17 ----RSD---- C:\Windows\assembly
2014-08-13 15:09:44 ----D---- C:\Windows\winsxs
2014-08-13 15:04:28 ----RSD---- C:\Windows\Fonts
2014-08-13 15:04:28 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-13 15:04:28 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-13 15:04:28 ----D---- C:\Windows\system32\cs-CZ
2014-08-13 15:04:28 ----D---- C:\Windows\System32
2014-08-13 15:04:28 ----D---- C:\Windows\ehome
2014-08-13 15:04:28 ----D---- C:\Program Files\Internet Explorer
2014-08-13 15:04:27 ----D---- C:\Windows\system32\en-US
2014-08-13 15:04:27 ----D---- C:\Windows\PolicyDefinitions
2014-08-13 15:04:27 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-13 10:41:51 ----D---- C:\Windows\system32\catroot2
2014-08-13 10:38:32 ----D---- C:\Windows\system32\MRT
2014-08-13 10:31:42 ----A---- C:\Windows\system32\MRT.exe
2014-08-13 10:29:44 ----D---- C:\ProgramData\Microsoft Help
2014-08-13 10:22:04 ----SD---- C:\Windows\system32\CompatTel
2014-07-29 06:30:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-25 02:42:05 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-25 02:42:03 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-08-18 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-08-18 224896]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-08-10 120920]
R0 mv91xx;mv91xx; C:\Windows\system32\DRIVERS\mv91xx.sys [2010-08-27 297000]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2006-10-18 52760]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2010-08-24 13440]
R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-08-18 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-08-18 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-08-18 427360]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-11-22 279616]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2009-06-08 86584]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-08-18 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-08-18 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-08-18 92008]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-10-27 38248]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-10-27 301680]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-10-27 31080]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-10-27 203624]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-10-27 58992]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-10-27 156520]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-10-27 279152]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 33856]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 26136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-02 2536040]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-09-30 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-09-30 180736]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-28 26440]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-28 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-10-27 55336]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [2010-11-03 918144]
R2 asHmComSvc;ASUS HM Com Service; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [2010-12-02 915584]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2010-10-21 586880]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-10-27 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-18 50344]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-07-21 2544976]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2010-08-12 133800]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-07-16 377616]
R2 NVSvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-07-15 75136]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-18 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-10 116648]
S2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-03-04 584488]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-09-15 1431888]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2013-08-22 142336]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-18 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-12-23 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-07-25 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-05-04 543656]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 VsEtwService120;Visual Studio ETW Event Collection Service; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [2013-10-05 87728]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-06 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 18 srp 2014 21:06

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

rozbithlavu2 · #3 Příspěvek od **rozbithlavu2** » 18 srp 2014 21:17

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Jose on po 18.08.2014 at 22:11:04,58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0061768.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0061768.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0061768.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0061768.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611171168}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622172268}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655175568}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666176668}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644174468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611171168}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622172268}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655175568}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666176668}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644174468}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0061768.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0061768.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0061768.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0061768.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655175568}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666176668}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644174468}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655175568}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666176668}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644174468}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171168}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 18.08.2014 at 22:16:41,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

rozbithlavu2 · #4 Příspěvek od **rozbithlavu2** » 18 srp 2014 21:32

# AdwCleaner v3.307 - Report created 18/08/2014 at 22:26:20
# Updated 17/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Jose - JOSE-PC
# Running from : C:\Users\Jose\Desktop\adwcleaner_3.307.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\HDtubeV1.6
Folder Deleted : C:\Users\Jose\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Jose\AppData\Local\Temp\iSafeRightKeyScan
Folder Deleted : C:\Users\máma2\AppData\Local\Google\Chrome\User Data\Default\Extensions\acaoakiamfeidcmgooclgeleejkbaecf
File Deleted : C:\Windows\System32\drivers\iSafeKrnlBoot.sys
File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log
File Deleted : C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage
File Deleted : C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal
File Deleted : C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 9aa7a2f7-3e64-439f-92c8-4dacad98419c
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-1
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-11
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-2
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-3
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-4
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-5_user
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-6
Task Deleted : abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-7

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\AppDataLow\Software\HDtubeV1.6
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\HDtubeV1.6
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDtubeV1.6
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v0.0.0.0

-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://search.qip.ru/search/?query={searchTerms}&from=os
Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

[ File : C:\Users\máma2\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ File : C:\Users\Táta2\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [4642 octets] - [27/05/2014 17:38:43]
AdwCleaner[R1].txt - [7737 octets] - [18/08/2014 22:19:42]
AdwCleaner[S0].txt - [4691 octets] - [27/05/2014 17:40:15]
AdwCleaner[S1].txt - [8012 octets] - [18/08/2014 22:26:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [8072 octets] ##########

#5 Příspěvek od **vyosek** » 19 srp 2014 15:05

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

rozbithlavu2 · #6 Příspěvek od **rozbithlavu2** » 20 srp 2014 09:26

Zoek.exe v5.0.0.0 Updated 19-08-2014
Tool run by Jose on st 20.08.2014 at 0:19:23,59.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jose\Desktop\zoek.com [Scan all users] [Script inserted]

==== System Restore Info ======================

20.8.2014 0:29:50 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{EFEED92A-A33D-4873-BA8F-32BAA631E54D} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Windows\syswow64\appdata deleted
C:\Users\Jose\.android deleted
C:\Users\Jose\AppData\Roaming\cdr.ini deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Jose\AppData\Local\cache deleted
C:\Users\Jose\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\wangzhisong deleted
"C:\Users\Jose\AppData\Roaming\Sony" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [18.08.2014 21:29]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[18.08.2014 21:29]
lhmiofmipcpmhgihiecmpiekcacigpgb - C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\chrome.crx[]

AdBlock - Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
avast Online Security - Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
HDtubeV1.6 - Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofaemmlijemfcopjandkcndefpnacabg
Latex4Facebook - Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\poipbfekjfkiblpnimhjjmdecjjiblhm

==== Chromium Startpages ======================

C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.google.com/",
"startup_urls": [ "http://www.google.com" ],

==== Chrome Fix ======================

C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully
C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\MMA2~1\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\TTA2~1\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\MMA2~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\TTA2~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lhmiofmipcpmhgihiecmpiekcacigpgb deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jose\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jose\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\MMA2~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\MMA2~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\TTA2~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\MMA2~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\TTA2~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=653 folders=569 1525898889 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Jose\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\temp emptied successfully
C:\Users\MMA2~1\AppData\Local\temp emptied successfully
C:\Users\TTA2~1\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jose\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on st 20.08.2014 at 9:45:55,87 ======================

#7 Příspěvek od **vyosek** » 21 srp 2014 20:43

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

rozbithlavu2 · #8 Příspěvek od **rozbithlavu2** » 21 srp 2014 22:45

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2014
Ran by Jose (administrator) on JOSE-PC on 21-08-2014 23:39:03
Running from C:\Users\Jose\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\EC Simulator.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\ProgramData\Boxtools\Toolbox.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
() C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(Dropbox, Inc.) C:\Users\Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Last.fm) C:\Program Files (x86)\Last.fm\LastFM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(KMP Meida co.,Ltd) C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Jose\Desktop\FRSTLauncher (3).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2010-11-02] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613536 2010-10-27] (Atheros Communications)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [ASUS ShellProcess Execute] => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GMouse] => C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [667648 2011-11-08] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-18] (AVAST Software)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Infium] => "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [QIP2005] => C:\Program Files (x86)\QIP\qip.exe [3330560 2010-10-29] (The Author of QIP)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Google Update] => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-05-06] (Google Inc.)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jose\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: Správa překryvné ikony digitálních podpisů AutoCADu -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jose\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: HDtubeV1.6 -> {11111111-1111-1111-1111-110611171168} -> C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho64.dll No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.2.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.2.1 -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Jose\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Jose\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: anvisoft.com/AdblockPlugin -> C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\npAdblockPlugin.dll No File
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-18]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com"
CHR Extension: (Dokumenty Google) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-03]
CHR Extension: (Disk Google) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-03]
CHR Extension: (YouTube) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-03]
CHR Extension: (Vyhledávání Google) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-03]
CHR Extension: (AdBlock) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-20]
CHR Extension: (WebSite Recommendation Lite) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\jopdpbolklklaiookikgmdinfbooiipj [2014-08-20]
CHR Extension: (Peněženka Google) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Drop Caps) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofaemmlijemfcopjandkcndefpnacabg [2014-08-20]
CHR Extension: (Late Night) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgbdhkpacgdhfabeceekiafonfkipohm [2014-08-20]
CHR Extension: (Gmail) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-03]
CHR Extension: (Latex for Facebook) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\poipbfekjfkiblpnimhjjmdecjjiblhm [2014-08-20]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-18]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-10-27] (Atheros Commnucations) [File not signed]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-18] (AVAST Software)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-07-15] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-18] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-18] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-18] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-18] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-18] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-22] (DT Soft Ltd)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 23:39 - 2014-08-21 23:39 - 00022454 _____ () C:\Users\Jose\Desktop\FRST.txt
2014-08-21 23:38 - 2014-08-21 23:39 - 00000000 ____D () C:\FRST
2014-08-21 23:37 - 2014-08-21 23:37 - 00112640 _____ (forum.viry.cz) C:\Users\Jose\Desktop\FRSTLauncher (3).exe
2014-08-21 23:31 - 2014-08-21 23:32 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64 (1).exe
2014-08-21 23:31 - 2014-08-21 23:31 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64.exe
2014-08-21 13:40 - 2014-08-21 15:07 - 04903686 _____ () C:\Users\Jose\Desktop\Scooby Doo.psd
2014-08-21 11:41 - 2014-08-21 11:41 - 00000000 ___RD () C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-20 00:51 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-20 00:29 - 2014-08-20 09:45 - 00009625 _____ () C:\zoek-results.log
2014-08-20 00:20 - 2014-08-20 00:20 - 00003100 _____ () C:\Windows\System32\Tasks\{78B13714-F302-4557-9602-85315E7690BD}
2014-08-20 00:20 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.com
2014-08-20 00:19 - 2014-08-20 00:45 - 00000000 ____D () C:\zoek_backup
2014-08-20 00:17 - 2014-08-20 00:17 - 04108341 _____ () C:\Users\Jose\Desktop\zoek.zip
2014-08-20 00:17 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.scr
2014-08-20 00:17 - 2014-08-07 00:31 - 01288704 _____ () C:\Users\Jose\Desktop\zoek.exe
2014-08-18 22:18 - 2014-08-18 22:18 - 01361671 _____ () C:\Users\Jose\Desktop\adwcleaner_3.307.exe
2014-08-18 22:16 - 2014-08-18 22:16 - 00003891 _____ () C:\Users\Jose\Desktop\JRT.txt
2014-08-18 22:11 - 2014-08-18 22:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-18 22:10 - 2014-08-18 22:10 - 01016261 _____ (Thisisu) C:\Users\Jose\Desktop\JRT.exe
2014-08-18 21:55 - 2014-08-18 21:55 - 01222144 _____ () C:\Users\Jose\Desktop\RSITx64.exe
2014-08-18 21:30 - 2014-08-18 21:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-08-18 21:29 - 2014-08-21 22:14 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-18 21:29 - 2014-08-18 21:29 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-08-18 21:29 - 2014-08-18 21:29 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-08-18 21:28 - 2014-08-18 21:28 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-18 21:06 - 2014-08-18 21:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-18 21:06 - 2014-08-18 21:06 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-18 21:05 - 2014-08-18 21:05 - 00003588 _____ () C:\Windows\System32\Tasks\temp_abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-2
2014-08-18 21:04 - 2014-08-18 21:04 - 00000000 ____D () C:\Users\Jose\Documents\Java
2014-08-15 15:29 - 2014-08-15 15:29 - 00000000 ___RD () C:\Users\máma2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\Public\Documents\Adobe
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\chc
2014-08-13 19:38 - 2014-08-13 19:38 - 05758464 _____ () C:\Users\máma2\Downloads\Csoda´s_kapuk_(1).pps
2014-08-13 19:37 - 2014-08-13 19:37 - 00003867 _____ () C:\Users\máma2\Downloads\priloha.htm
2014-08-13 10:22 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 10:22 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 10:22 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 10:22 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 10:22 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 10:22 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 10:22 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 10:22 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 10:19 - 2014-08-13 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-08-13 10:19 - 2014-08-13 10:19 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-08-13 00:42 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 00:42 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 00:42 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 00:42 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 00:42 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 00:42 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 00:42 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 00:42 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 00:42 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 00:42 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 00:42 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 00:42 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 00:42 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 00:42 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 00:42 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 00:42 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 00:42 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 00:42 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 00:42 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 00:42 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 00:42 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 00:41 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 00:41 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 00:41 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 00:41 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 00:41 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 00:41 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 00:41 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 00:41 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 00:41 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 00:41 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 00:41 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 00:41 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 00:41 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 00:41 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 00:41 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 00:41 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 00:41 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 00:41 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 00:41 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 00:41 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 00:41 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 00:41 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 00:41 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 00:41 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 00:41 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 00:41 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 00:41 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 00:41 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 00:41 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 00:41 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 00:41 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 00:41 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 00:41 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 00:41 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 00:41 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 00:41 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 00:41 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 00:41 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 00:41 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 00:41 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 00:41 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 00:41 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 00:41 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 00:41 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 00:41 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 00:41 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 00:41 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 00:41 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 00:41 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 00:41 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 00:41 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 00:41 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 00:41 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 00:41 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 00:41 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 00:41 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 00:41 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 00:41 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 00:41 - 2014-07-16 05:25 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 00:41 - 2014-07-16 04:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-13 00:41 - 2014-07-16 04:12 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 00:41 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 00:41 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-13 00:41 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 00:41 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 00:41 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-06 12:31 - 2014-08-06 12:31 - 01683968 _____ () C:\Users\máma2\Downloads\Skoro_neuveriteln��_fotky.pps
2014-08-06 12:17 - 2014-08-06 12:17 - 03357184 _____ () C:\Users\máma2\Downloads\Třeste_se_Češi.PPS
2014-08-06 12:06 - 2014-08-06 12:06 - 06157824 _____ () C:\Users\máma2\Downloads\Tutanchamon.pps
2014-08-03 22:32 - 2014-08-03 22:32 - 00000000 ____D () C:\Users\Jose\AppData\Local\WB Games
2014-08-03 22:13 - 2014-08-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Snowblind Studios
2014-08-03 22:02 - 2014-08-03 22:02 - 00000000 ____D () C:\Program Files (x86)\Snowblind Studios
2014-07-31 22:13 - 2014-07-31 22:15 - 00052736 _____ (Interplay Productions) C:\Windows\ipuninst.exe
2014-07-31 22:13 - 2014-07-31 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tantrum
2014-07-31 22:13 - 2014-07-31 22:13 - 00000000 ____D () C:\Program Files\Tantrum
2014-07-30 14:51 - 2014-07-30 14:51 - 03346432 _____ () C:\Users\máma2\Downloads\Super_nápady_-_SNAD_SI_NĚCO_VYBEREŠ.pps
2014-07-27 21:23 - 2014-07-29 06:29 - 00000000 ____D () C:\Users\Jose\Desktop\Nová složka (3)

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 23:39 - 2014-08-21 23:39 - 00022454 _____ () C:\Users\Jose\Desktop\FRST.txt
2014-08-21 23:39 - 2014-08-21 23:38 - 00000000 ____D () C:\FRST
2014-08-21 23:37 - 2014-08-21 23:37 - 00112640 _____ (forum.viry.cz) C:\Users\Jose\Desktop\FRSTLauncher (3).exe
2014-08-21 23:32 - 2014-08-21 23:31 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64 (1).exe
2014-08-21 23:31 - 2014-08-21 23:31 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64.exe
2014-08-21 23:25 - 2013-02-25 17:11 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job
2014-08-21 23:01 - 2014-04-03 15:41 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job
2014-08-21 22:58 - 2014-06-20 15:53 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job
2014-08-21 22:58 - 2014-04-05 07:43 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job
2014-08-21 22:14 - 2014-08-18 21:29 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-21 22:14 - 2011-05-06 05:44 - 01729838 _____ () C:\Windows\WindowsUpdate.log
2014-08-21 19:21 - 2013-02-12 23:47 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\eM Client
2014-08-21 15:58 - 2014-06-20 15:53 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job
2014-08-21 15:07 - 2014-08-21 13:40 - 04903686 _____ () C:\Users\Jose\Desktop\Scooby Doo.psd
2014-08-21 15:00 - 2011-05-09 21:53 - 00000000 ____D () C:\Users\Jose\AppData\Local\Last.fm
2014-08-21 12:11 - 2013-01-12 01:17 - 00000000 ____D () C:\ProgramData\Boxtools
2014-08-21 11:41 - 2014-08-21 11:41 - 00000000 ___RD () C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-21 11:41 - 2014-05-06 20:47 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job
2014-08-21 11:41 - 2014-01-06 15:26 - 00000000 ___RD () C:\Users\Jose\Dropbox
2014-08-21 11:41 - 2014-01-06 14:35 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\Dropbox
2014-08-21 11:41 - 2011-05-26 19:27 - 00000000 ____D () C:\Users\Jose\AppData\Local\LogMeIn Hamachi
2014-08-21 11:41 - 2011-05-06 06:01 - 00000048 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-08-21 11:41 - 2009-07-14 06:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:41 - 2009-07-14 06:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:34 - 2009-07-14 06:45 - 05191696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-21 11:32 - 2014-05-27 17:42 - 00008120 _____ () C:\Windows\setupact.log
2014-08-21 11:32 - 2014-01-21 22:03 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-08-21 11:32 - 2011-05-06 17:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-21 11:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-21 04:58 - 2011-05-09 22:15 - 00000000 ____D () C:\Users\Jose\AppData\Local\Adobe
2014-08-20 09:45 - 2014-08-20 00:29 - 00009625 _____ () C:\zoek-results.log
2014-08-20 09:38 - 2014-05-27 17:42 - 00003310 _____ () C:\Windows\PFRO.log
2014-08-20 09:34 - 2013-02-25 17:11 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job
2014-08-20 00:45 - 2014-08-20 00:19 - 00000000 ____D () C:\zoek_backup
2014-08-20 00:44 - 2011-05-06 05:44 - 00000000 ____D () C:\Users\Jose
2014-08-20 00:20 - 2014-08-20 00:20 - 00003100 _____ () C:\Windows\System32\Tasks\{78B13714-F302-4557-9602-85315E7690BD}
2014-08-20 00:17 - 2014-08-20 00:17 - 04108341 _____ () C:\Users\Jose\Desktop\zoek.zip
2014-08-18 23:30 - 2012-10-19 02:51 - 00000000 ____D () C:\Users\Jose\Documents\FIFA 13
2014-08-18 22:26 - 2014-05-27 17:38 - 00000000 ____D () C:\AdwCleaner
2014-08-18 22:26 - 2014-05-27 14:33 - 00000000 ____D () C:\Windows\system32\log
2014-08-18 22:18 - 2014-08-18 22:18 - 01361671 _____ () C:\Users\Jose\Desktop\adwcleaner_3.307.exe
2014-08-18 22:16 - 2014-08-18 22:16 - 00003891 _____ () C:\Users\Jose\Desktop\JRT.txt
2014-08-18 22:11 - 2014-08-18 22:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-18 22:10 - 2014-08-18 22:10 - 01016261 _____ (Thisisu) C:\Users\Jose\Desktop\JRT.exe
2014-08-18 21:56 - 2013-01-23 19:30 - 00000000 ____D () C:\Program Files\trend micro
2014-08-18 21:55 - 2014-08-18 21:55 - 01222144 _____ () C:\Users\Jose\Desktop\RSITx64.exe
2014-08-18 21:30 - 2014-08-18 21:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-08-18 21:29 - 2014-08-18 21:29 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-08-18 21:29 - 2014-08-18 21:29 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-08-18 21:29 - 2014-08-18 21:29 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-08-18 21:29 - 2013-11-19 10:30 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-08-18 21:28 - 2014-08-18 21:28 - 00000000 ____D () C:\Program Files\AVAST Software
2014-08-18 21:28 - 2013-11-19 10:25 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-18 21:08 - 2011-05-06 17:53 - 00000000 ___RD () C:\Users\Jose\Desktop\DWN
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-08-18 21:07 - 2014-08-18 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-18 21:06 - 2014-08-18 21:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-18 21:06 - 2014-08-18 21:06 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-18 21:06 - 2012-10-26 11:15 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-18 21:06 - 2012-10-26 11:15 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-18 21:05 - 2014-08-18 21:05 - 00003588 _____ () C:\Windows\System32\Tasks\temp_abfaa13a-23f5-4ce8-8528-1a48c5fe31c6-2
2014-08-18 21:04 - 2014-08-18 21:04 - 00000000 ____D () C:\Users\Jose\Documents\Java
2014-08-16 20:42 - 2011-05-06 18:25 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\DAEMON Tools Lite
2014-08-16 19:07 - 2014-01-06 14:53 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-15 15:29 - 2014-08-15 15:29 - 00000000 ___RD () C:\Users\máma2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-08-15 15:29 - 2013-12-11 13:29 - 00000000 ____D () C:\Users\máma2\AppData\Local\LogMeIn Hamachi
2014-08-14 10:11 - 2011-05-06 17:38 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\uTorrent
2014-08-14 08:09 - 2011-05-06 05:59 - 00000000 ____D () C:\Users\Jose\Documents\Bluetooth Folder
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\Public\Documents\Adobe
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2014-08-14 02:13 - 2014-08-14 02:13 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\chc
2014-08-14 02:13 - 2013-10-31 14:06 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\Adobe
2014-08-13 21:19 - 2014-02-14 19:57 - 00000000 ____D () C:\Users\máma2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-08-13 19:38 - 2014-08-13 19:38 - 05758464 _____ () C:\Users\máma2\Downloads\Csoda´s_kapuk_(1).pps
2014-08-13 19:37 - 2014-08-13 19:37 - 00003867 _____ () C:\Users\máma2\Downloads\priloha.htm
2014-08-13 16:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-13 15:06 - 2009-07-14 07:08 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-13 15:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 14:59 - 2013-03-28 16:23 - 00034816 _____ () C:\Users\máma2\Documents\Uklid 2013 - 14.xls
2014-08-13 10:38 - 2013-08-09 19:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 10:31 - 2011-05-06 17:36 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 10:29 - 2011-05-07 15:17 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-13 10:22 - 2014-05-06 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 10:19 - 2014-08-13 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-08-13 10:19 - 2014-08-13 10:19 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-08-09 15:52 - 2014-08-20 00:20 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.com
2014-08-09 15:52 - 2014-08-20 00:17 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.scr
2014-08-07 04:06 - 2014-08-13 00:41 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-13 00:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-07 00:31 - 2014-08-20 00:17 - 01288704 _____ () C:\Users\Jose\Desktop\zoek.exe
2014-08-06 12:31 - 2014-08-06 12:31 - 01683968 _____ () C:\Users\máma2\Downloads\Skoro_neuveriteln��_fotky.pps
2014-08-06 12:17 - 2014-08-06 12:17 - 03357184 _____ () C:\Users\máma2\Downloads\Třeste_se_Češi.PPS
2014-08-06 12:06 - 2014-08-06 12:06 - 06157824 _____ () C:\Users\máma2\Downloads\Tutanchamon.pps
2014-08-05 09:20 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 14:31 - 2011-05-09 20:27 - 00000000 ___RD () C:\Users\Jose\Desktop\Games
2014-08-03 22:32 - 2014-08-03 22:32 - 00000000 ____D () C:\Users\Jose\AppData\Local\WB Games
2014-08-03 22:13 - 2014-08-03 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Snowblind Studios
2014-08-03 22:02 - 2014-08-03 22:02 - 00000000 ____D () C:\Program Files (x86)\Snowblind Studios
2014-08-01 01:41 - 2014-08-13 00:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-13 00:41 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-31 22:16 - 2011-05-06 05:45 - 00000000 ____D () C:\Users\Jose\AppData\Local\VirtualStore
2014-07-31 22:15 - 2014-07-31 22:13 - 00052736 _____ (Interplay Productions) C:\Windows\ipuninst.exe
2014-07-31 22:15 - 2011-06-16 18:51 - 00000000 ____D () C:\Users\Jose\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-07-31 22:15 - 2011-05-10 09:22 - 00000000 ____D () C:\Users\Jose\AppData\Local\CrashDumps
2014-07-31 22:13 - 2014-07-31 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tantrum
2014-07-31 22:13 - 2014-07-31 22:13 - 00000000 ____D () C:\Program Files\Tantrum
2014-07-30 14:51 - 2014-07-30 14:51 - 03346432 _____ () C:\Users\máma2\Downloads\Super_nápady_-_SNAD_SI_NĚCO_VYBEREŠ.pps
2014-07-29 06:30 - 2010-11-21 11:27 - 00651268 _____ () C:\Windows\system32\perfh005.dat
2014-07-29 06:30 - 2010-11-21 11:27 - 00134564 _____ () C:\Windows\system32\perfc005.dat
2014-07-29 06:30 - 2009-07-14 07:13 - 01534368 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-29 06:29 - 2014-07-27 21:23 - 00000000 ____D () C:\Users\Jose\Desktop\Nová složka (3)
2014-07-25 16:52 - 2014-08-13 00:41 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 16:02 - 2014-08-13 00:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 16:01 - 2014-08-13 00:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 15:51 - 2014-08-13 00:41 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:30 - 2014-08-13 00:41 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 15:28 - 2014-08-13 00:41 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:28 - 2014-08-13 00:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 15:25 - 2014-08-13 00:41 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-13 00:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 15:11 - 2014-08-13 00:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 15:10 - 2014-08-13 00:41 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 15:04 - 2014-08-13 00:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 00:41 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 15:00 - 2014-08-13 00:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 15:00 - 2014-08-13 00:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:59 - 2014-08-13 00:41 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:47 - 2014-08-13 00:41 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 14:40 - 2014-08-13 00:41 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-13 00:41 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:34 - 2014-08-13 00:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-25 14:33 - 2014-08-13 00:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 00:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-13 00:41 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-13 00:41 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-13 00:41 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:19 - 2014-08-13 00:41 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 14:18 - 2014-08-13 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 00:41 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:17 - 2014-08-13 00:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-25 14:12 - 2014-08-13 00:41 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-25 14:10 - 2014-08-13 00:41 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:10 - 2014-08-13 00:41 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-25 14:08 - 2014-08-13 00:41 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 00:41 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-13 00:41 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-13 00:41 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-13 00:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-13 00:41 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-13 00:41 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:39 - 2014-08-13 00:41 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:36 - 2014-08-13 00:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-25 13:34 - 2014-08-13 00:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 00:41 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-13 00:41 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-13 00:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:07 - 2014-08-13 00:41 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 00:41 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 00:41 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-13 00:41 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-13 00:41 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-13 00:41 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-13 00:41 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 00:41 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-13 00:41 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-25 02:42 - 2012-12-11 21:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 02:42 - 2012-12-11 21:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 06:38 - 2012-12-11 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\Jose\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpictxwa.dll
C:\Users\Jose\AppData\Local\Temp\KMP_3.9.0.126.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-08-17 00:21

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:931.41 GB) (Free:60.45 GB) NTFS
Drive f: (DVD_FLAVIO) (CDROM) (Total:4.36 GB) (Free:0 GB) UDF

Available physical RAM: 5400.93 MB
Total physical RAM: 8168.94 MB
Percentage of memory in use: 33%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FBC39779)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jose\Desktop" je 195374 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#9 Příspěvek od **vyosek** » 24 srp 2014 10:09

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Infium] => "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [QIP2005] => C:\Program Files (x86)\QIP\qip.exe [3330560 2010-10-29] (The Author of QIP)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Google Update] => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-05-06] (Google Inc.)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

BHO: HDtubeV1.6 -> {11111111-1111-1111-1111-110611171168} -> C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho64.dll No File
C:\Program Files (x86)\HDtubeV1.6

CHR Extension: (WebSite Recommendation Lite) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\jopdpbolklklaiookikgmdinfbooiipj [2014-08-20]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files\Enigma Software Group

2014-08-21 23:39 - 2014-08-21 23:39 - 00022454 _____ () C:\Users\Jose\Desktop\FRST.txt
2014-08-21 23:37 - 2014-08-21 23:37 - 00112640 _____ (forum.viry.cz) C:\Users\Jose\Desktop\FRSTLauncher (3).exe
2014-08-21 23:31 - 2014-08-21 23:32 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64 (1).exe
2014-08-20 00:51 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-20 00:29 - 2014-08-20 09:45 - 00009625 _____ () C:\zoek-results.log
2014-08-20 00:20 - 2014-08-20 00:20 - 00003100 _____ () C:\Windows\System32\Tasks\{78B13714-F302-4557-9602-85315E7690BD}
2014-08-20 00:20 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.com
2014-08-20 00:19 - 2014-08-20 00:45 - 00000000 ____D () C:\zoek_backup
2014-08-20 00:17 - 2014-08-20 00:17 - 04108341 _____ () C:\Users\Jose\Desktop\zoek.zip
2014-08-20 00:17 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.scr
2014-08-20 00:17 - 2014-08-07 00:31 - 01288704 _____ () C:\Users\Jose\Desktop\zoek.exe
2014-08-18 22:18 - 2014-08-18 22:18 - 01361671 _____ () C:\Users\Jose\Desktop\adwcleaner_3.307.exe
2014-08-18 22:16 - 2014-08-18 22:16 - 00003891 _____ () C:\Users\Jose\Desktop\JRT.txt
2014-08-18 22:11 - 2014-08-18 22:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-18 22:10 - 2014-08-18 22:10 - 01016261 _____ (Thisisu) C:\Users\Jose\Desktop\JRT.exe
2014-08-18 21:55 - 2014-08-18 21:55 - 01222144 _____ () C:\Users\Jose\Desktop\RSITx64.exe
C:\Windows\AutoKMS

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

rozbithlavu2 · #10 Příspěvek od **rozbithlavu2** » 24 srp 2014 20:39

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-08-2014 03
Ran by Jose at 2014-08-24 21:32:41 Run:1
Running from C:\Users\Jose\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Infium] => "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [QIP2005] => C:\Program Files (x86)\QIP\qip.exe [3330560 2010-10-29] (The Author of QIP)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Run: [Google Update] => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-05-06] (Google Inc.)
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

BHO: HDtubeV1.6 -> {11111111-1111-1111-1111-110611171168} -> C:\Program Files (x86)\HDtubeV1.6\HDtubeV1.6-bho64.dll No File
C:\Program Files (x86)\HDtubeV1.6

CHR Extension: (WebSite Recommendation Lite) - C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\jopdpbolklklaiookikgmdinfbooiipj [2014-08-20]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files\Enigma Software Group

2014-08-21 23:39 - 2014-08-21 23:39 - 00022454 _____ () C:\Users\Jose\Desktop\FRST.txt
2014-08-21 23:37 - 2014-08-21 23:37 - 00112640 _____ (forum.viry.cz) C:\Users\Jose\Desktop\FRSTLauncher (3).exe
2014-08-21 23:31 - 2014-08-21 23:32 - 02101760 _____ (Farbar) C:\Users\Jose\Desktop\FRST64 (1).exe
2014-08-20 00:51 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-20 00:29 - 2014-08-20 09:45 - 00009625 _____ () C:\zoek-results.log
2014-08-20 00:20 - 2014-08-20 00:20 - 00003100 _____ () C:\Windows\System32\Tasks\{78B13714-F302-4557-9602-85315E7690BD}
2014-08-20 00:20 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.com
2014-08-20 00:19 - 2014-08-20 00:45 - 00000000 ____D () C:\zoek_backup
2014-08-20 00:17 - 2014-08-20 00:17 - 04108341 _____ () C:\Users\Jose\Desktop\zoek.zip
2014-08-20 00:17 - 2014-08-09 15:52 - 01419472 _____ () C:\Users\Jose\Desktop\zoek.scr
2014-08-20 00:17 - 2014-08-07 00:31 - 01288704 _____ () C:\Users\Jose\Desktop\zoek.exe
2014-08-18 22:18 - 2014-08-18 22:18 - 01361671 _____ () C:\Users\Jose\Desktop\adwcleaner_3.307.exe
2014-08-18 22:16 - 2014-08-18 22:16 - 00003891 _____ () C:\Users\Jose\Desktop\JRT.txt
2014-08-18 22:11 - 2014-08-18 22:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-18 22:10 - 2014-08-18 22:10 - 01016261 _____ (Thisisu) C:\Users\Jose\Desktop\JRT.exe
2014-08-18 21:55 - 2014-08-18 21:55 - 01222144 _____ () C:\Users\Jose\Desktop\RSITx64.exe
C:\Windows\AutoKMS

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job => C:\Users\Jose\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job => C:\Users\Máma\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Boxoft Tools => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Infium => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\QIP2005 => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-4151458990-3383436761-1323320495-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171168}" => Key deleted successfully.
"HKCR\CLSID\{11111111-1111-1111-1111-110611171168}" => Key deleted successfully.
"C:\Program Files (x86)\HDtubeV1.6" => File/Directory not found.
C:\Users\Jose\AppData\Local\Google\Chrome\User Data\Default\Extensions\jopdpbolklklaiookikgmdinfbooiipj => Moved successfully.
catchme => Service deleted successfully.
esgiguard => Service deleted successfully.
C:\Program Files\Enigma Software Group => Moved successfully.
C:\Users\Jose\Desktop\FRST.txt => Moved successfully.
"C:\Users\Jose\Desktop\FRSTLauncher (3).exe" => File/Directory not found.
"C:\Users\Jose\Desktop\FRST64 (1).exe" => File/Directory not found.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Windows\System32\Tasks\{78B13714-F302-4557-9602-85315E7690BD} => Moved successfully.
C:\Users\Jose\Desktop\zoek.com => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Jose\Desktop\zoek.zip => Moved successfully.
C:\Users\Jose\Desktop\zoek.scr => Moved successfully.
C:\Users\Jose\Desktop\zoek.exe => Moved successfully.
C:\Users\Jose\Desktop\adwcleaner_3.307.exe => Moved successfully.
C:\Users\Jose\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Jose\Desktop\JRT.exe => Moved successfully.
C:\Users\Jose\Desktop\RSITx64.exe => Moved successfully.
"C:\Windows\AutoKMS" => File/Directory not found.
C:\Windows\Tasks\AutoKMS.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf695ba06393ab.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4f425e120b52.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000Core1cf8c8fe3ed6a6.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf5091f0271af9.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1000UA1cf8c8f1000b17c.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4151458990-3383436761-1323320495-1004UA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

The system needed a reboot.

==== End of Fixlog ====

#11 Příspěvek od **vyosek** » 24 srp 2014 20:50

Jak se chova PC

rozbithlavu2 · #12 Příspěvek od **rozbithlavu2** » 25 srp 2014 12:45

vypadá to dobře, už to nic nehlásí. Díky moc

#13 Příspěvek od **vyosek** » 25 srp 2014 18:22

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

trojan kryptik

trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik

Re: trojan kryptik