Prosím o kontrolu - niekto mi ovláda PC?

[JoZQo]

Nechcem byť paranoidný, niekedy mi to ale príde tak, akoby mi niekto niečo písal na klávesnici.. Občas, keď niečo píšem, začnú sa mi tam samé od seba písať aj iné znaky. Dnes som si vyhľadával "ps1 games on ps4" a za to sa mi samo pripísalo "360 vs one". Nebol to ten návrh od googlu, videl som, ako to tam pribúdalo písmeno po písmene. Teraz som kukal seriál cez VLC a zrazu sa mi akoby stlačila klávesa "N" a prehrávanie sa mi začalo odznova.. Neviete, čo to môže byť a čo s tým? Ďakujem.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jozo at 2014-08-20 19:44:09
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 38 GB (38%) free of 100 GB
Total RAM: 3326 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:44:11, on 20. 8. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Gaming Keyboard\Monitor.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Origin\Origin.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Gaming Keyboard\OSD.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\Rohos\agent.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files\Steam\bin\steamwebhelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jozo\Downloads\RSIT.exe
C:\Program Files\trend micro\Jozo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [NCUpdateHelper] C:\Program Files\NCWest\NCLauncher\NCUpdateHelper.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [EADM] "C:\Program Files\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Jozo\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Jozo\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [Rohos] C:\Program Files\Rohos\agent.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_38AA079E32A6800235061772B317E376] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Rohos Disk service (Rohos Disk) - Tesline-Service SRL - C:\Program Files\Rohos\agent.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

--
End of file - 8858 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cec5d9d698d2be.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-25 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-25 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2013-03-29 11930696]
"NCUpdateHelper"=C:\Program Files\NCWest\NCLauncher\NCUpdateHelper.exe [2014-05-19 526240]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5110672]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2014-05-30 2352072]
"ShadowPlay"=C:\Windows\system32\nvspcap.dll [2014-05-30 1122312]
"VICTORY Gaming Keyboard"=C:\Program Files\Gaming Keyboard\Monitor.exe [2013-04-09 270336]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EADM"=C:\Program Files\Origin\Origin.exe [2014-08-06 3600728]
"Steam"=C:\Program Files\Steam\steam.exe [2014-08-14 1937600]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2014-08-08 22734160]
"cz.seznam.software.autoupdate"=C:\Users\Jozo\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Jozo\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]
"Sony PC Companion"=C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [2014-05-23 466656]
"Rohos"=C:\Program Files\Rohos\agent.exe [2014-04-03 816736]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2013-01-16 2736128]
"GoogleChromeAutoLaunch_38AA079E32A6800235061772B317E376"=C:\Program Files\Google\Chrome\Application\chrome.exe [2014-08-07 860488]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"VIDC.FPS1"=frapsvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"VIDC.RTV1"=rtvcvfw32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-20 10:17:26 ----D---- C:\2-click run
2014-08-13 09:28:51 ----A---- C:\Windows\system32\infocardapi.dll
2014-08-13 09:28:49 ----A---- C:\Windows\system32\icardres.dll
2014-08-13 09:28:46 ----A---- C:\Windows\system32\icardagt.exe
2014-08-13 09:28:45 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-13 09:24:33 ----A---- C:\Windows\system32\shell32.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\urlmon.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 09:24:18 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-13 09:24:18 ----A---- C:\Windows\system32\iernonce.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-13 09:24:18 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-13 09:24:18 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-13 09:24:17 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-13 09:24:17 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-13 09:24:16 ----A---- C:\Windows\system32\vbscript.dll
2014-08-13 09:24:16 ----A---- C:\Windows\system32\msrating.dll
2014-08-13 09:24:16 ----A---- C:\Windows\system32\iesetup.dll
2014-08-13 09:24:16 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 09:24:16 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-13 09:24:15 ----A---- C:\Windows\system32\wininet.dll
2014-08-13 09:24:15 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-13 09:24:14 ----A---- C:\Windows\system32\ieui.dll
2014-08-13 09:24:14 ----A---- C:\Windows\system32\ieframe.dll
2014-08-13 09:24:14 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-13 09:24:13 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-13 09:24:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-13 09:24:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-13 09:24:12 ----A---- C:\Windows\system32\iertutil.dll
2014-08-13 09:24:11 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-13 09:24:11 ----A---- C:\Windows\system32\jscript9.dll
2014-08-13 09:24:10 ----A---- C:\Windows\system32\mshtml.dll
2014-08-13 09:23:46 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-13 09:23:46 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-13 09:23:46 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-13 09:23:46 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-13 09:23:46 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-13 09:23:35 ----A---- C:\Windows\system32\msi.dll
2014-08-13 09:23:35 ----A---- C:\Windows\system32\authui.dll
2014-08-13 09:23:34 ----A---- C:\Windows\system32\msihnd.dll
2014-08-13 09:23:34 ----A---- C:\Windows\system32\consent.exe
2014-08-13 09:23:06 ----A---- C:\Windows\system32\tzres.dll
2014-08-13 09:22:44 ----A---- C:\Windows\system32\win32k.sys
2014-08-13 09:22:43 ----A---- C:\Windows\system32\gdi32.dll
2014-08-13 09:22:42 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-13 09:22:40 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-08-13 09:22:40 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-13 09:22:39 ----A---- C:\Windows\system32\cdd.dll
2014-08-11 14:45:31 ----D---- C:\Users\Jozo\AppData\Roaming\.mono
2014-08-11 14:45:24 ----D---- C:\Users\Jozo\AppData\Roaming\creeperworld3
2014-08-08 15:35:06 ----D---- C:\Program Files\OpenAL
2014-08-08 15:35:06 ----A---- C:\Windows\system32\wrap_oal.dll
2014-08-08 15:35:06 ----A---- C:\Windows\system32\OpenAL32.dll
2014-08-07 22:40:53 ----D---- C:\Program Files\PCSX2 1.2.1
2014-08-05 11:18:50 ----D---- C:\Program Files\Common Files\Java
2014-08-05 11:18:44 ----A---- C:\Windows\system32\javaws.exe
2014-08-05 11:18:37 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-08-05 11:18:37 ----A---- C:\Windows\system32\javaw.exe
2014-08-05 11:18:37 ----A---- C:\Windows\system32\java.exe
2014-07-29 01:16:18 ----D---- C:\NVIDIA
2014-07-26 13:38:46 ----SHD---- C:\ProgramData\SecuROM

======List of files/folders modified in the last 1 month======

2014-08-20 19:44:10 ----D---- C:\Program Files\trend micro
2014-08-20 19:43:44 ----D---- C:\Windows\Temp
2014-08-20 19:43:38 ----D---- C:\Windows\Prefetch
2014-08-20 19:08:25 ----D---- C:\Users\Jozo\AppData\Roaming\uTorrent
2014-08-20 19:06:23 ----D---- C:\Users\Jozo\AppData\Roaming\Skype
2014-08-20 18:28:07 ----RD---- C:\Program Files
2014-08-20 16:25:40 ----D---- C:\Users\Jozo\AppData\Roaming\vlc
2014-08-20 10:18:02 ----RSD---- C:\Windows\Fonts
2014-08-20 09:02:36 ----D---- C:\Windows\system32\config
2014-08-20 08:54:29 ----D---- C:\Users\Jozo\AppData\Roaming\Seznam.cz
2014-08-20 08:49:25 ----D---- C:\Program Files\Origin
2014-08-20 08:49:24 ----D---- C:\Program Files\Steam
2014-08-20 08:48:17 ----D---- C:\ProgramData\NVIDIA
2014-08-19 11:42:21 ----D---- C:\Windows\system32\DriverStore
2014-08-18 22:07:11 ----HD---- C:\Program Files\InstallShield Installation Information
2014-08-18 22:07:06 ----SHD---- C:\System Volume Information
2014-08-18 22:06:01 ----SHD---- C:\Windows\Installer
2014-08-18 22:06:00 ----HD---- C:\Config.Msi
2014-08-18 22:05:49 ----D---- C:\Windows\system32\directx
2014-08-18 10:28:16 ----D---- C:\ProgramData\Origin
2014-08-17 16:25:23 ----D---- C:\Windows\System32
2014-08-17 16:25:23 ----D---- C:\Windows\inf
2014-08-17 16:25:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-16 11:47:26 ----D---- C:\Program Files\Common Files\Steam
2014-08-14 22:51:08 ----D---- C:\Windows\system32\catroot2
2014-08-14 16:31:09 ----D---- C:\Windows\rescache
2014-08-14 12:49:48 ----D---- C:\Windows\Microsoft.NET
2014-08-14 12:48:18 ----RSD---- C:\Windows\assembly
2014-08-14 11:40:32 ----D---- C:\Windows\system32\NDF
2014-08-13 23:16:09 ----D---- C:\Windows\winsxs
2014-08-13 23:14:05 ----D---- C:\Windows\system32\sk-SK
2014-08-13 23:14:05 ----D---- C:\Windows\system32\drivers
2014-08-13 23:14:05 ----D---- C:\Windows\PolicyDefinitions
2014-08-13 23:14:05 ----D---- C:\Windows\ehome
2014-08-13 23:14:04 ----D---- C:\Windows\system32\en-US
2014-08-13 23:14:04 ----D---- C:\Program Files\Internet Explorer
2014-08-13 10:46:49 ----HD---- C:\Program Files\Common Files\EAInstaller
2014-08-13 09:36:02 ----D---- C:\Windows\system32\MRT
2014-08-13 09:31:19 ----D---- C:\Windows\debug
2014-08-13 09:31:17 ----A---- C:\Windows\system32\MRT.exe
2014-08-13 09:29:08 ----D---- C:\Windows\system32\catroot
2014-08-09 12:42:32 ----D---- C:\Windows\system32\Tasks
2014-08-08 13:16:09 ----D---- C:\Windows
2014-08-08 13:15:49 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2014-08-08 13:14:55 ----D---- C:\Users\Jozo\AppData\Roaming\DAEMON Tools Lite
2014-08-08 09:21:52 ----D---- C:\Fraps
2014-08-08 09:19:49 ----D---- C:\Program Files\Battlelog Web Plugins
2014-08-08 00:44:04 ----A---- C:\Windows\system32\PnkBstrB.exe
2014-08-08 00:24:05 ----A---- C:\Windows\system32\PnkBstrA.exe
2014-08-07 22:44:08 ----D---- C:\Windows\Logs
2014-08-07 22:41:55 ----D---- C:\ProgramData\Package Cache
2014-08-05 11:23:24 ----D---- C:\ProgramData\Oracle
2014-08-05 11:18:50 ----D---- C:\Program Files\Common Files
2014-08-05 11:18:37 ----D---- C:\Program Files\Java
2014-07-27 12:53:10 ----D---- C:\Users\Jozo\AppData\Roaming\TS3Client
2014-07-27 12:45:18 ----D---- C:\Windows\Minidump
2014-07-26 15:01:34 ----D---- C:\Program Files\Google
2014-07-26 13:38:46 ----HD---- C:\ProgramData
2014-07-25 10:24:09 ----D---- C:\Program Files\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-18 242240]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 174400]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 RHDISK;RHDISK; \??\C:\Program Files\Rohos\RHDISK.SYS [2014-03-13 41984]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2013-03-29 2646088]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-30 19232]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 ScpVBus;Scp Virtual Bus Driver; C:\Windows\system32\DRIVERS\ScpVBus.sys [2013-05-05 33024]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athur.sys [2012-10-18 1570304]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-04-05 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-04-05 25200]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [2010-11-01 14416]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 xnacc;XBOX 360 Controller For Windows Driver Service; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 465408]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2013-01-16 73728]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-05-30 1631008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-05-30 19741472]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 668104]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2014-08-08 76888]
R2 Rohos Disk;Rohos Disk service; C:\Program Files\Rohos\agent.exe [2014-04-03 816736]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-20 410968]
R2 TeamViewer9;TeamViewer 9; C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe [2014-08-06 5052224]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-08-14 833728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-17 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-17 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-07-25 108032]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-18 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Rudy]

Zdravím!
Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[JoZQo]

ComboFix 14-08-19.01 - Jozo . 08. 2014 20:48:46.1.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.3326.2239 [GMT 2:00]
Running from: c:\users\Jozo\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jozo\AppData\Roaming\Microsoft\Windows\Recent\Grand Theft Auto Episodes from Liberty City.url
C:\zip.exe
.
.
((((((((((((((((((((((((( Files Created from 2014-07-20 to 2014-08-20 )))))))))))))))))))))))))))))))
.
.
2014-08-20 08:18 . 2014-08-20 15:31 -------- d-----w- c:\users\Jozo\AppData\Local\Game Dev Tycoon - Steam
2014-08-20 08:17 . 2014-08-20 08:17 -------- d-----w- C:\2-click run
2014-08-13 07:28 . 2014-03-09 21:47 99480 ----a-w- c:\windows\system32\infocardapi.dll
2014-08-13 07:28 . 2014-06-30 22:14 8856 ----a-w- c:\windows\system32\icardres.dll
2014-08-13 07:28 . 2014-03-09 21:47 619672 ----a-w- c:\windows\system32\icardagt.exe
2014-08-13 07:28 . 2014-06-06 06:16 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-08-13 07:23 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDYAK.DLL
2014-08-13 07:23 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDBASH.DLL
2014-08-13 07:23 . 2014-06-03 09:29 2363392 ----a-w- c:\windows\system32\msi.dll
2014-08-13 07:23 . 2014-06-03 09:29 1805824 ----a-w- c:\windows\system32\authui.dll
2014-08-13 07:23 . 2014-06-03 09:30 101824 ----a-w- c:\windows\system32\consent.exe
2014-08-13 07:23 . 2014-06-03 09:29 337408 ----a-w- c:\windows\system32\msihnd.dll
2014-08-13 07:23 . 2014-07-16 02:46 2048 ----a-w- c:\windows\system32\tzres.dll
2014-08-13 07:22 . 2014-07-16 01:47 2352640 ----a-w- c:\windows\system32\win32k.sys
2014-08-13 07:22 . 2014-07-16 02:47 305152 ----a-w- c:\windows\system32\gdi32.dll
2014-08-13 07:22 . 2014-07-14 01:42 654336 ----a-w- c:\windows\system32\rpcrt4.dll
2014-08-13 07:22 . 2014-06-16 01:44 730048 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-08-13 07:22 . 2014-06-16 01:44 219072 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2014-08-13 07:22 . 2014-06-16 01:40 107520 ----a-w- c:\windows\system32\cdd.dll
2014-08-11 12:45 . 2014-08-11 12:45 -------- d-----w- c:\users\Jozo\AppData\Roaming\.mono
2014-08-11 12:45 . 2014-08-11 12:45 -------- d-----w- c:\users\Jozo\AppData\Roaming\creeperworld3
2014-08-08 13:35 . 2014-08-08 13:35 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2014-08-08 13:35 . 2014-08-08 13:35 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2014-08-08 13:35 . 2014-08-08 13:35 -------- d-----w- c:\program files\OpenAL
2014-08-07 20:40 . 2014-08-07 20:44 -------- d-----w- c:\program files\PCSX2 1.2.1
2014-08-05 09:18 . 2014-08-05 09:18 -------- d-----w- c:\program files\Common Files\Java
2014-08-05 09:18 . 2014-07-25 10:55 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-07-28 23:16 . 2014-07-28 23:16 -------- d-----w- C:\NVIDIA
2014-07-26 11:38 . 2014-07-26 11:38 -------- d-sh--w- c:\programdata\SecuROM
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-07 22:44 . 2013-11-23 14:57 139552 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2014-08-07 22:44 . 2013-11-23 14:52 291296 ----a-w- c:\windows\system32\PnkBstrB.exe
2014-08-07 22:44 . 2013-09-27 08:45 291296 ----a-w- c:\windows\system32\PnkBstrB.xtr
2014-08-07 22:24 . 2013-08-21 19:58 138904 ----a-w- c:\users\Jozo\AppData\Roaming\PnkBstrK.sys
2014-08-07 22:24 . 2013-08-21 19:58 281872 ----a-w- c:\windows\system32\PnkBstrB.ex0
2014-08-07 22:24 . 2013-11-23 14:52 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2014-07-09 14:31 . 2013-10-16 16:22 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-09 14:31 . 2013-10-16 16:22 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-06-18 01:51 . 2014-07-09 08:55 646144 ----a-w- c:\windows\system32\osk.exe
2014-06-06 09:44 . 2014-07-09 08:56 509440 ----a-w- c:\windows\system32\qedit.dll
2014-06-05 14:26 . 2014-07-09 08:55 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2014-05-30 07:52 . 2014-07-09 08:56 172032 ----a-w- c:\windows\system32\wdigest.dll
2014-05-30 07:52 . 2014-07-09 08:56 65536 ----a-w- c:\windows\system32\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 08:56 247808 ----a-w- c:\windows\system32\schannel.dll
2014-05-30 07:52 . 2014-07-09 08:56 220160 ----a-w- c:\windows\system32\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 08:56 259584 ----a-w- c:\windows\system32\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 08:56 550912 ----a-w- c:\windows\system32\kerberos.dll
2014-05-30 07:52 . 2014-07-09 08:56 17408 ----a-w- c:\windows\system32\credssp.dll
2014-05-30 06:36 . 2014-07-09 08:55 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2014-05-29 23:07 . 2014-06-24 11:23 1291232 ----a-w- c:\windows\system32\nvspbridge.dll
2014-05-29 23:07 . 2014-06-24 10:33 1122312 ----a-w- c:\windows\system32\nvspcap.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EADM"="c:\program files\Origin\Origin.exe" [2014-08-06 3600728]
"Steam"="c:\program files\Steam\steam.exe" [2014-08-13 1937600]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2014-08-08 22734160]
"cz.seznam.software.autoupdate"="c:\users\Jozo\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Jozo\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"Sony PC Companion"="c:\program files\Sony\Sony PC Companion\PCCompanion.exe" [2014-05-23 466656]
"Rohos"="c:\program files\Rohos\agent.exe" [2014-04-03 816736]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2013-01-16 2736128]
"GoogleChromeAutoLaunch_38AA079E32A6800235061772B317E376"="c:\program files\Google\Chrome\Application\chrome.exe" [2014-08-07 860488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2013-03-29 11930696]
"NCUpdateHelper"="c:\program files\NCWest\NCLauncher\NCUpdateHelper.exe" [2014-05-19 526240]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5110672]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2352072]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-05-29 1122312]
"VICTORY Gaming Keyboard"="c:\program files\Gaming Keyboard\Monitor.exe" [2013-04-09 270336]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-07-25 256896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-08-18 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 Rohos Disk;Rohos Disk service;c:\program files\Rohos\agent.exe [2014-04-03 816736]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athur.sys [2012-10-18 1570304]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2014-04-05 12400]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-08-18 1343400]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [2010-11-01 14416]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-18 242240]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-05-29 1631008]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-05-29 19741472]
S2 RHDISK;RHDISK;c:\program files\Rohos\RHDISK.SYS [2014-03-13 41984]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-19 410968]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-08-06 5052224]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-29 19232]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
S3 ScpVBus;Scp Virtual Bus Driver;c:\windows\system32\DRIVERS\ScpVBus.sys [2013-05-05 33024]
S3 Sony PC Companion;Sony PC Companion;c:\program files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2013-01-16 10:46 454176 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-15 20:27 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-16 14:31]
.
2014-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-17 06:49]
.
2014-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cec5d9d698d2be.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-17 06:49]
.
.
------- Supplementary Scan -------
.
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-Assassins Creed III_is1 - d:\assassins creed iii\unins000.exe
AddRemove-Battlelog Web Plugins - c:\program files\Battlelog Web Plugins\uninstall.exe
AddRemove-PunkBusterSvc - d:\origin\Hry\Battlefield 4\pbsvc.exe
AddRemove-RGVtb2xpdGlvbkluY2luY2xVcGRhdGVhbmRETEM=_is1 - d:\demolition inc\unins000.exe
AddRemove-Train Simulator 2014 - Steam Edition_is1 - d:\railworks\unins000.exe
AddRemove-{D0087539-3C57-44E0-BEE7-D779D546CBE1} - c:\program files\InstallShield Installation Information\{D0087539-3C57-44E0-BEE7-D779D546CBE1}\Sims3SP09Setup.exe
AddRemove-Limbo - d:\limbo\Uninstall.exe
AddRemove-SOE-DC Universe Online Live PSG - d:\dc universe online\Uninstaller.exe
AddRemove-SOE-DC Universe Online PSG - d:\dc universe online\Uninstaller.exe
AddRemove-Zoo Tycoon Čeština 1.05 - d:\zoo tycoon\Uninstal.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2732934864-1045885090-3111488736-1000\Software\SecuROM\License information*]
"datasecu"=hex:a8,a3,a2,48,7a,58,20,6c,af,22,92,50,15,79,b2,bd,dd,02,90,05,ef,
96,bf,e1,df,ea,ad,55,93,24,ba,6f,a5,28,52,95,76,e5,65,ce,27,dd,bf,f4,3c,06,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-08-20 20:56:47
ComboFix-quarantined-files.txt 2014-08-20 18:56
.
Pre-Run: 45 126 471 680 bytes free
Post-Run: 45 326 471 168 bytes free
.
- - End Of File - - C1E8BA0BFDFDDF026052C76D6B05DDDF
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA1cec5d9d698d2be.job

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

Regnull::
[HKEY_USERS\S-1-5-21-2732934864-1045885090-3111488736-1000\Software\SecuROM\License information*]

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[JoZQo]

Bola to príčina mojich problémov?

ComboFix 14-08-19.01 - Jozo . 08. 2014 21:52:46.2.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.3326.997 [GMT 2:00]
Running from: c:\users\Jozo\Desktop\ComboFix.exe
Command switches used :: c:\users\Jozo\Desktop\CFScript.txt
AV: ESET Smart Security 7.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Resident AV is active
.
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA1cec5d9d698d2be.job"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_ctypes.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_elementtree.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_hashlib.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_multiprocessing.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_socket.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\_ssl.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\hashobjs_ext.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\pyexpat.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\pysqlite2._sqlite.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\python27.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\pythoncom27.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\PyWinTypes27.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\select.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\unicodedata.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32api.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32com.shell.shell.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32crypt.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32event.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32file.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32gui.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32inet.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32pdh.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32pipe.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32process.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32profile.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32security.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\win32ts.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\windows._lib_cacheinvalidation.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._animate.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._controls_.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._core_.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._gdi_.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._html2.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._misc_.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._windows_.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wx._wizard.pyd
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxbase294u_net_vc90.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxbase294u_vc90.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxmsw294u_adv_vc90.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxmsw294u_core_vc90.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxmsw294u_html_vc90.dll
c:\users\Jozo\AppData\Local\Temp\_MEI53642\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Files Created from 2014-07-20 to 2014-08-20 )))))))))))))))))))))))))))))))
.
.
2014-08-20 20:01 . 2014-08-20 20:01 -------- d-----w- c:\users\hedev\AppData\Local\temp
2014-08-20 20:01 . 2014-08-20 20:01 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-08-20 08:18 . 2014-08-20 19:29 -------- d-----w- c:\users\Jozo\AppData\Local\Game Dev Tycoon - Steam
2014-08-20 08:17 . 2014-08-20 08:17 -------- d-----w- C:\2-click run
2014-08-13 07:28 . 2014-03-09 21:47 99480 ----a-w- c:\windows\system32\infocardapi.dll
2014-08-13 07:28 . 2014-06-30 22:14 8856 ----a-w- c:\windows\system32\icardres.dll
2014-08-13 07:28 . 2014-03-09 21:47 619672 ----a-w- c:\windows\system32\icardagt.exe
2014-08-13 07:28 . 2014-06-06 06:16 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-08-13 07:23 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDYAK.DLL
2014-08-13 07:23 . 2014-07-09 01:29 6144 ----a-w- c:\windows\system32\KBDBASH.DLL
2014-08-13 07:23 . 2014-06-03 09:29 2363392 ----a-w- c:\windows\system32\msi.dll
2014-08-13 07:23 . 2014-06-03 09:29 1805824 ----a-w- c:\windows\system32\authui.dll
2014-08-13 07:23 . 2014-06-03 09:30 101824 ----a-w- c:\windows\system32\consent.exe
2014-08-13 07:23 . 2014-06-03 09:29 337408 ----a-w- c:\windows\system32\msihnd.dll
2014-08-13 07:23 . 2014-07-16 02:46 2048 ----a-w- c:\windows\system32\tzres.dll
2014-08-13 07:22 . 2014-07-16 01:47 2352640 ----a-w- c:\windows\system32\win32k.sys
2014-08-13 07:22 . 2014-07-16 02:47 305152 ----a-w- c:\windows\system32\gdi32.dll
2014-08-13 07:22 . 2014-07-14 01:42 654336 ----a-w- c:\windows\system32\rpcrt4.dll
2014-08-13 07:22 . 2014-06-16 01:44 730048 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-08-13 07:22 . 2014-06-16 01:44 219072 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2014-08-13 07:22 . 2014-06-16 01:40 107520 ----a-w- c:\windows\system32\cdd.dll
2014-08-11 12:45 . 2014-08-11 12:45 -------- d-----w- c:\users\Jozo\AppData\Roaming\.mono
2014-08-11 12:45 . 2014-08-11 12:45 -------- d-----w- c:\users\Jozo\AppData\Roaming\creeperworld3
2014-08-08 13:35 . 2014-08-08 13:35 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2014-08-08 13:35 . 2014-08-08 13:35 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2014-08-08 13:35 . 2014-08-08 13:35 -------- d-----w- c:\program files\OpenAL
2014-08-07 20:40 . 2014-08-07 20:44 -------- d-----w- c:\program files\PCSX2 1.2.1
2014-08-05 09:18 . 2014-08-05 09:18 -------- d-----w- c:\program files\Common Files\Java
2014-08-05 09:18 . 2014-07-25 10:55 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-07-28 23:16 . 2014-07-28 23:16 -------- d-----w- C:\NVIDIA
2014-07-26 11:38 . 2014-07-26 11:38 -------- d-sh--w- c:\programdata\SecuROM
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-07 22:44 . 2013-11-23 14:57 139552 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2014-08-07 22:44 . 2013-11-23 14:52 291296 ----a-w- c:\windows\system32\PnkBstrB.exe
2014-08-07 22:44 . 2013-09-27 08:45 291296 ----a-w- c:\windows\system32\PnkBstrB.xtr
2014-08-07 22:24 . 2013-08-21 19:58 138904 ----a-w- c:\users\Jozo\AppData\Roaming\PnkBstrK.sys
2014-08-07 22:24 . 2013-08-21 19:58 281872 ----a-w- c:\windows\system32\PnkBstrB.ex0
2014-08-07 22:24 . 2013-11-23 14:52 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2014-07-09 14:31 . 2013-10-16 16:22 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-09 14:31 . 2013-10-16 16:22 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-06-18 01:51 . 2014-07-09 08:55 646144 ----a-w- c:\windows\system32\osk.exe
2014-06-06 09:44 . 2014-07-09 08:56 509440 ----a-w- c:\windows\system32\qedit.dll
2014-06-05 14:26 . 2014-07-09 08:55 1059840 ----a-w- c:\windows\system32\lsasrv.dll
2014-05-30 07:52 . 2014-07-09 08:56 172032 ----a-w- c:\windows\system32\wdigest.dll
2014-05-30 07:52 . 2014-07-09 08:56 65536 ----a-w- c:\windows\system32\TSpkg.dll
2014-05-30 07:52 . 2014-07-09 08:56 247808 ----a-w- c:\windows\system32\schannel.dll
2014-05-30 07:52 . 2014-07-09 08:56 220160 ----a-w- c:\windows\system32\ncrypt.dll
2014-05-30 07:52 . 2014-07-09 08:56 259584 ----a-w- c:\windows\system32\msv1_0.dll
2014-05-30 07:52 . 2014-07-09 08:56 550912 ----a-w- c:\windows\system32\kerberos.dll
2014-05-30 07:52 . 2014-07-09 08:56 17408 ----a-w- c:\windows\system32\credssp.dll
2014-05-30 06:36 . 2014-07-09 08:55 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2014-05-29 23:07 . 2014-06-24 11:23 1291232 ----a-w- c:\windows\system32\nvspbridge.dll
2014-05-29 23:07 . 2014-06-24 10:33 1122312 ----a-w- c:\windows\system32\nvspcap.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EADM"="c:\program files\Origin\Origin.exe" [2014-08-06 3600728]
"Steam"="c:\program files\Steam\steam.exe" [2014-08-13 1937600]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2014-08-08 22734160]
"cz.seznam.software.autoupdate"="c:\users\Jozo\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Jozo\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2014-05-08 21444224]
"Sony PC Companion"="c:\program files\Sony\Sony PC Companion\PCCompanion.exe" [2014-05-23 466656]
"Rohos"="c:\program files\Rohos\agent.exe" [2014-04-03 816736]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2013-01-16 2736128]
"GoogleChromeAutoLaunch_38AA079E32A6800235061772B317E376"="c:\program files\Google\Chrome\Application\chrome.exe" [2014-08-07 860488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2013-03-29 11930696]
"NCUpdateHelper"="c:\program files\NCWest\NCLauncher\NCUpdateHelper.exe" [2014-05-19 526240]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5110672]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2352072]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-05-29 1122312]
"VICTORY Gaming Keyboard"="c:\program files\Gaming Keyboard\Monitor.exe" [2013-04-09 270336]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-08-18 280576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athur.sys [2012-10-18 1570304]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2014-04-05 12400]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-07-25 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-08-18 1343400]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\IObit\Game Booster 3\Driver\WinRing0.sys [2010-11-01 14416]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-08-18 242240]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-05-29 1631008]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-05-29 19741472]
S2 RHDISK;RHDISK;c:\program files\Rohos\RHDISK.SYS [2014-03-13 41984]
S2 Rohos Disk;Rohos Disk service;c:\program files\Rohos\agent.exe [2014-04-03 816736]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-19 410968]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-08-06 5052224]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-29 19232]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
S3 ScpVBus;Scp Virtual Bus Driver;c:\windows\system32\DRIVERS\ScpVBus.sys [2013-05-05 33024]
S3 Sony PC Companion;Sony PC Companion;c:\program files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2013-01-16 10:46 454176 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-15 20:27 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-16 14:31]
.
2014-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-17 06:49]
.
2014-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cec5d9d698d2be.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-17 06:49]
.
.
------- Supplementary Scan -------
.
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
.
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\conhost.exe
c:\program files\TeamViewer\Version9\TeamViewer.exe
c:\windows\system32\conhost.exe
c:\program files\TeamViewer\Version9\tv_w32.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Gaming Keyboard\OSD.exe
c:\users\Jozo\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
c:\program files\Sony\Sony PC Companion\PCCompanionInfo.exe
c:\program files\Steam\bin\steamwebhelper.exe
c:\program files\Common Files\Steam\SteamService.exe
c:\windows\system32\sppsvc.exe
c:\windows\system32\taskhost.exe
.
**************************************************************************
.
Completion time: 2014-08-20 22:08:00 - machine was rebooted
ComboFix-quarantined-files.txt 2014-08-20 20:07
ComboFix2.txt 2014-08-20 18:56
.
Pre-Run: 44 851 154 944 bytes free
Post-Run: 44 777 742 336 bytes free
.
- - End Of File - - 36A8560AEBF0479A1C19F9A5FB79B092
A36C5E4F47E84449FF07ED3517B43A31

[JoZQo]

Teraz som si všimol, že už mi idú dobre FHD videá na YouTube, niečo sa teda zlepšilo Bude treba ešte niečo robiť alebo to už je čisté?

[Rudy]

Po stránce virové je čisto. Pokud není jiný problém, je to vše. CF odinastalujte pomocí T-Cleaneru: http://vyosek.ic.cz/pro_usery/T-Cleaner.exe .

[JoZQo]

No vypadá to dobre To čo tam bolo mohlo spôsobovať tie moje problémy?

[Rudy]

Mohlo, byl tam troják a ostatní byly zbytečnosti.

[JoZQo]

Tak teda ďakujem

[Rudy]

Nemáte zač!