Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

v prohlížeči mi vyskakuje stále nějaké okna

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

v prohlížeči mi vyskakuje stále nějaké okna

#1 Příspěvek od gago1 »

Dobrý den,
prosím o pomoc s PC

log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2014-08-24 09:42:24
Microsoft Windows 8
System drive C: has 256 GB (56%) free of 460 GB
Total RAM: 3976 MB (58% free)


======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
"dwm.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\Hpservice.exe
"C:\Program Files (x86)\StartW8\bin\StartW8Service.exe"
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
dashost.exe {bc281a7c-d0b9-4752-82f7966f84b9ad61}
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\SysWOW64\nethtsrv.exe
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\Windows\SysWOW64\netupdsrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Windows Defender\MsMpEng.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-daf4929f-834e-49cd-9cb4-50505e3d41ab -SystemEventPortName:HostProcess-cc5abe2e-5d44-4dce-b257-a6242eb7ceab -IoCancelEventPortName:HostProcess-8e521259-85e1-4d60-b9f7-b706404f974e -NonStateChangingEventPortName:HostProcess-11228c10-f7ff-4032-b3f2-38d83d28328a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ad9b499e-6152-4a75-8861-6569d2f1e5ea -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7076a277-c6c0-4355-b318-9993b157425e -SystemEventPortName:HostProcess-ecf6e400-19f1-46e1-ad79-b383ec5b54ea -IoCancelEventPortName:HostProcess-ba8cf9a5-e3d3-4189-a4b4-eeae80d95580 -NonStateChangingEventPortName:HostProcess-e0603b72-53e2-47f7-809a-240392c69c57 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a8cdbd22-634d-4df4-a97f-36dcba79a170 -DeviceGroupId:WudfDefaultDevicePool
"C:\Program Files (x86)\StartW8\bin\StartW8Button.exe"
taskeng.exe {1A797B2E-5E48-46A5-A74B-5098E6390B12}
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostex.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\StartW8\bin\StartW8Menu.exe
"c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
taskeng.exe {415B50BD-1D49-4AA1-B6A0-03D004AC9928}
"C:\Program Files (x86)\Internet Speed Checker\fce8c2d7-5c51-4c23-8076-a0d9f3f93126.exe" /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.inputgenserv.com /runfrom='task' /externallog=''
"C:\Program Files (x86)\HD-V1.9\1ce23471-b063-47c0-b9e9-1e097165ae0e.exe" 001859 FB0DDE01630548B0830C83CEAC89CD38IE 61792 1407870751 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 HD-V1.9
"C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-6.exe" /agentregpath='Internet Speed Checker-nv' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ie /DllName32ToInjectToChrome='06b91407-0a48-4b8e-a4f9-82c2cafd9212.dll' /DllName64ToInjectToChrome='091546db-0528-41cf-80e6-13ccee56baa9.dll' /nova64bitexe='010aae86-234a-482b-8ed2-17e286f2bce4-64.exe' /browsername='nova' /usehklm /crregname='Internet Speed Checker' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 549453825, 0],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputgenserv.com/novarun/ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5148.0.2042445093\1013029140" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,5,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0106 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2843 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group14 pct:1e stable:r1 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/NewSuggestType_A9_Stable_R2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5148.2.34947003\1525040390" /prefetch:673131151
"c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group14 pct:1e stable:r1 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/NewSuggestType_A9_Stable_R2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5148.3.557024039\833090031" /prefetch:673131151
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
taskeng.exe {56EA45B4-566B-440D-9BD5-CFFF19358878}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5148.9.870741712\455876867" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
"C:\program files (x86)\internet speed checker\internet speed checker-bg.exe" /createbg
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group14 pct:1e stable:r1 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/NewSuggestType_A9_Stable_R2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5148.11.2105841948\1185481559" /prefetch:673131151
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4012 CREDAT:2888974 /prefetch:2
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
C:\Windows\system32\msiexec.exe /V
taskeng.exe {16B0C311-27F0-404B-A259-633A67931BC9}
taskhost.exe $(Arg0)
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 556 560 568 65536 564
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group14 pct:1e stable:r1 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/OmniboxBundledExperimentV1/NewSuggestType_A9_Stable_R2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-1-Percent/group_58/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_07/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-pinch --enable-threaded-compositing --enable-delegated-renderer --channel="5148.13.849433845\1150659063" /prefetch:673131151
"C:\Users\Ondra\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-1.job - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ie /crregname='Internet Speed Checker' /fbcodedownloaddomain=http://js.clientdemocloud.com /allusers /addinfojson='{"asw":[0, 549453825, 0],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputgenserv.com/ie_code_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-11.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-11.exe /rawdata=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
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-2.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-2.exe /enablebho /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /bhoguid=11111111-1111-1111-1111-110611171152 /defbro=ie /allusers /autoupdateulr='http://update.inputgenserv.com/ie_enabl ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-4.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-4.exe /installxpi /agentregpath='Internet Speed Checker' /extensionfilepath='C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4.xpi' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /waitforbrowser=300 /extensionid=sepherdwilbur@aol.com /extensionversion=0.95 /prefsbranch=asepherdwilburaolcom61752 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /61752.rdf /extensionname='Internet Speed Checker' /extensiondesc='Test your internet speed with 1-click' /publishername='Speedchecker' /defbro=ie /sid=S-1-5-21-2315802412-815962061-3052649632-1002 /addinfojson='{"asw":[0, 549453825, 0],"browser_name":"__BROWSER_NAME__"}' /allusers /allprofiles /checkfflist /autoupdateulr='http://update.inputgenserv.com/ff_agent ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-5.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-5.exe /runupdater /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputgenserv.com /sid=S-1-5-21-2315802412-815962061-3052649632-1002 /updaterversion=6 /monetizationdomain=http://logs.inputgenserv.com /autoupdateulr='http://update.inputgenserv.com/updater_ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-5_user.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-5.exe /runupdater /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputgenserv.com /sid=S-1-5-21-2315802412-815962061-3052649632-1002 /updaterversion=6 /monetizationdomain=http://logs.inputgenserv.com /autoupdateulr='http://update.inputgenserv.com/updater_ ... pdate.json' /usertask /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-6.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-6.exe /agentregpath='Internet Speed Checker-nv' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ie /DllName32ToInjectToChrome='06b91407-0a48-4b8e-a4f9-82c2cafd9212.dll' /DllName64ToInjectToChrome='091546db-0528-41cf-80e6-13ccee56baa9.dll' /nova64bitexe='010aae86-234a-482b-8ed2-17e286f2bce4-64.exe' /browsername='nova' /usehklm /crregname='Internet Speed Checker' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 549453825, 0],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputgenserv.com/novarun/ ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\010aae86-234a-482b-8ed2-17e286f2bce4-7.job - C:\Program Files (x86)\Internet Speed Checker\010aae86-234a-482b-8ed2-17e286f2bce4-7.exe /updateapp /agentregpath='Internet Speed Checker-nv' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ie /DllName32ToInjectToChrome='06b91407-0a48-4b8e-a4f9-82c2cafd9212.dll' /DllName64ToInjectToChrome='091546db-0528-41cf-80e6-13ccee56baa9.dll' /nova64bitexe='010aae86-234a-482b-8ed2-17e286f2bce4-64.exe' /browsername='nova' /usehklm /crregname='Internet Speed Checker' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[0, 549453825, 0],"browser_name":"__BROWSER_NAME__"}' /runfrom=task /autoupdateulr='http://update.inputgenserv.com/novacode ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\0864773b-cee5-4aba-a445-37192f97832a.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-4.exe /rawdata=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
C:\Windows\tasks\1ce23471-b063-47c0-b9e9-1e097165ae0e.job - C:\Program Files (x86)\HD-V1.9\1ce23471-b063-47c0-b9e9-1e097165ae0e.exe 001859 FB0DDE01630548B0830C83CEAC89CD38IE 61792 1407870751 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 HD-V1.9
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-1.job - C:\Program Files (x86)\HD-V1.9\HD-V1.9-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='HD-V1.9' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installerfullversion=1.34.7.29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ie /crregname='HD-V1.9' /fbcodedownloaddomain=http://js.clientdemocloud.com /allusers /addinfojson='{"asw":[32768, 536870913, 0],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputdatacloud.com/ie_cod ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-11.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-11.exe /rawdata=Tza0lMhJ8Q9Su8qWas4+uLwxZqQWLC4/1InhtQhw7lxkKyPM5Q4y694qR6l2ZM+UAfZD5qw0vMI+FAmnhtBcjfxvE4aIxvHZqSRoCqPm7alFDSINfhZ7FUB1QhBWKN9mc+h03/grr7FaWsJVlynx7/7tbeZsCWZdw4RohexIko1a59hDGRNRbhhNq1IQ1yYjGKEPr4Kt+QskhEp/IMl0JhXgZyNCM16IKXKd8Y407lH9amsCwAm0Tvt8xq4lWmolkOMi3Dzd2xiHDVbYo7olDdRbg1eTtseL1GP806cT05zsNs23i3aBD+4KjqqyBueW3ySgUQo/Ib5UXVIXTlNcKyaU5ZJeSMHb+WW5iRfcQ7LyIAwOeSuAPzVPPYmGqpQckcS7xrPPfF5neu3H/hOxHQPPc3t6MSHbYXhi9Yu6KazzQ+0IKwJpDyNLKuHQC1e3yjgtWgqqzHmVDqKoIQcuS46k7ovKsUyoCnSHch29Y59nML7W8X4V7CyZuS/+d6qPStQneGKMbb6s/rEAFWSPETX9CTSGa4Rc4YKpvZdjdQOnSWXYSDh322C/PkR5MiiXwefzNp21dleYBByImOHS58I7cDA/M1jvBuruR7j3WANhD+rQL+CqiNcq+RRGzqUkpTaT/N0ST2qrYMFGPQz4UZqJpLW1jiNtLnbHp3EsF9sHI/lI4ke2BaJTl6nAnvkvqPxp5eMeN4856zNvyrr5i0HPhC2hPdADBpzJkswEgK3LSV0lifFfJDnzzukJKmESnRFT+m9anIM0Ntb/+IY/teQHOfHK0fP/vzK66cthOG6KMy/GL5SFSWdubiMSP724zzEP7Wr9twPtHr2TBPsigzzvh0TpNy5UeCPnxLyIOZTuB5lPhJelpsMLISkJEPVZ+zyjuzUAINlLqoRsf5GTDtRF/e0dZreFMUQwFM/eSKOAMArQmmtw1XXOdqHvJ31MkuO6O8a1VXte0jNmYRLUPRKB65JecAujxG4pr23cXxKwAfZhHGuvCHYj47n3K+0pYaSWvCXQr0+knC3549LSsPT2LIRpRD+qU76tdEwTBActVnTHEf3GDmC8qRTXjT7fsOktIgvFdLUEg10nWgy3Qtgo+Y4wjpdq/9HcX3/2/gBGp8eKMr9jmJ3Yh2HrQyDh0SXoNV303B6mfNfP81W1RHsP07tr70ggYFKMxfyGf6uhyaCCHWhVYAG/17Pw2CtJMe34cI2+oob2sTQTGtS06uaQxJpHAvaFCbt1Dn+PzA6beE0lGTqb7d/1FiExlsI2atV2luvh/Va8K8waMQ3NhGs6MM2cx8wOIrlMo1Vdbst9iBHWrmuCLz74X3WpUNGf0y0DGkblxIcbtYavCQSxB2IspJZnhp57BD1a9ETtUZ/d94OgRIvVirwJrfdDUKAVHNtGfWCXiPhyCEe6yYnPdGW7AfmU8e3AIa1YiKLYJv7hkCsWXjDsTW01He6ph7WNLfiO6JLYphhctKoprZcO8t5D8X7WDBD/Bcs+G6czWseiKGIZ/vOiskVrt1Zw4i9kfIH7iTWwnGbzQtmjQMS1vrGjrKttnTI1WYlieGkTIv3HxVGeAFbaqcwd+EJUx5hVWV30CCqO9M0/c+CoyolnyQuwVpSHCN++2fZScZ5hBbyXfJft0coCIZglLh6oPhUPrJEz2AHCDqVvpHY8dpfFPaX3AuK/UiORTHIduNcX/+F+EakiE76t4HpZpFbnYjaack/UWNBp1U+OOQuvaxR6RblxjhbsP8v0yEScKFZO2BX43t4OKt02d8ED60WzKNGfv+hVTGCpspkys3CqAmt2M4gJPaGu5CCBkMlPHaZJeBbiaHAfh9sRYdI2BSOVKpPUHAhsw5wPdEUYzFEghO8vWQilY3P+biLR6SZOP2eOu1ZixMiHaoCN0xL6LWWGc5pQ74Wrll7xA5lLsL5V97QuPdVRNs0Pqnz6kR+uattZRnvbVzgDhD3u4Dl6aAaq1ZpZM/LmH2XV47N8aKW/xHfL3vmJCAMxKjtl+TtO5kvKLrRTcSqjJzAxmmAGpuHndyNW
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-2.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-2.exe /enablebho /agentregpath='HD-V1.9' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /bhoguid=11111111-1111-1111-1111-110611171192 /defbro=ie /useiepol /allusers /autoupdateulr='http://update.inputdatacloud.com/ie_ena ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-3.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-3.exe /rawdata=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
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-4.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-4.exe /installxpi /agentregpath='HD-V1.9' /extensionfilepath='C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7.xpi' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installerfullversion=1.34.7.29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /waitforbrowser=300 /extensionid=UIMGMKB37220652@DPOEER3647180.com /extensionversion=0.95 /prefsbranch=aUIMGMKB37220652DPOEER3647180com61792 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /61792.rdf /extensionname='HD-V1.9' /extensiondesc='Lights out for YouTube' /publishername='InfoHD-V1.8' /defbro=ie /sid=S-1-5-21-2315802412-815962061-3052649632-1002 /addinfojson='{"asw":[32768, 536870913, 0],"browser_name":"__BROWSER_NAME__"}' /allusers /allprofiles /checkfflist /autoupdateulr='http://update.inputdatacloud.com/ff_age ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-6.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-6.exe /agentregpath='HD-V1.9-4c7d' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installerfullversion=1.34.7.29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ie /DllName32ToInjectToChrome='1a8f1759-2cf9-4675-92e5-640cca9d7335.dll' /DllName64ToInjectToChrome='d638262c-7acd-4f09-8222-71364042d272.dll' /nova64bitexe='4c7d9f47-8186-4362-9bc8-2636ef05d9a7-64.exe' /browsername='nova' /usehklm /crregname='HD-V1.9' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[32768, 536870913, 0],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputdatacloud.com/novaru ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-7.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-7.exe /updateapp /agentregpath='HD-V1.9-4c7d' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installerfullversion=1.34.7.29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /codedownloaddomain=http://js.inputdatacloud.com /defbro=ie /DllName32ToInjectToChrome='1a8f1759-2cf9-4675-92e5-640cca9d7335.dll' /DllName64ToInjectToChrome='d638262c-7acd-4f09-8222-71364042d272.dll' /nova64bitexe='4c7d9f47-8186-4362-9bc8-2636ef05d9a7-64.exe' /browsername='nova' /usehklm /crregname='HD-V1.9' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[32768, 536870913, 0],"browser_name":"__BROWSER_NAME__"}' /runfrom=task /autoupdateulr='http://update.inputdatacloud.com/novaco ... pdate.json' /runfrom='task' /externallog=''
C:\Windows\tasks\59f45487-2a6b-4d4b-9794-785c25a397ec.job - C:\Program Files (x86)\Internet Speed Checker\59f45487-2a6b-4d4b-9794-785c25a397ec.exe 001726 F232D3DBE71140B3916C8E89EEEA99F6IE 61752 1408799368 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 Internet Speed Checker
C:\Windows\tasks\fce8c2d7-5c51-4c23-8076-a0d9f3f93126.job - C:\Program Files (x86)\Internet Speed Checker\fce8c2d7-5c51-4c23-8076-a0d9f3f93126.exe /agentregpath='Internet Speed Checker' /appid=61752 /srcid='001726' /subid='0' /zdata='0' /bic=F232D3DBE71140B3916C8E89EEEA99F6IE /verifier=405c04a15dcfddc2a55fb1a9922e4e6d /installerversion=1_34_08_12 /installationtime=1408799368 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.inputgenserv.com /runfrom='task' /externallog=''
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\temp_4c7d9f47-8186-4362-9bc8-2636ef05d9a7-2.job - C:\Program Files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7-2.exe /enablebho /agentregpath='HD-V1.9' /appid=61792 /srcid='001859' /subid='0' /zdata='0' /bic=FB0DDE01630548B0830C83CEAC89CD38IE /verifier=69634112e9f0ef161ca634971d02e1b8 /installerversion=1_34_07_29 /installationtime=1407870751 /statsdomain=http://stats.inputdatacloud.com /errorsdomain=http://errors.inputdatacloud.com /bhoguid=11111111-1111-1111-1111-110611171192 /defbro=ie /useiepol /allusers /autoupdateulr='http://update.inputdatacloud.com/ie_ena ... pdate.json' /runfrom='installer' /externallog='C:\Users\Ondra\AppData\Local\Temp\HD-V1.9Installer_1407870751.log'

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}]
Internet Speed Checker - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho64.dll [2014-08-23 791912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-07-27 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}]
Internet Speed Checker - C:\Program Files (x86)\Internet Speed Checker\Internet Speed Checker-bho.dll [2014-08-23 586600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-07-27 1730256]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-10 351136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-25 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-25 398656]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-25 441152]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-06 1425408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2012-07-17 684064]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2012-08-29 334240]
"BtTray"=c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-08-16 364032]
"HP HD Webcam Driver_Monitor"=C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe [2012-07-26 303480]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08 111120]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2012-07-24 491120]
"RemoteControl10"=c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"StartW8Button"=C:\Program Files (x86)\StartW8\bin\StartW8Button.exe [2012-12-19 52224]
"mnchwgqSrv"=C:\Windows\system32\mnchwgq.vbe []
"MSStp"=C:\Windows\system32\msstp.vbe []
"mnchnuqcwSrv"=C:\Windows\inf\mnchnuqcw.vbe [2014-01-19 1342]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-23 441856]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-24 09:42:24 ----D---- C:\rsit
2014-08-24 09:42:24 ----D---- C:\Program Files\trend micro
2014-08-24 09:38:32 ----A---- C:\awhC887.tmp
2014-08-23 15:16:47 ----A---- C:\awh26F8.tmp
2014-08-23 15:15:13 ----A---- C:\Windows\system32\sdnclean64.exe
2014-08-23 15:15:12 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-08-23 15:15:05 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-23 15:09:35 ----D---- C:\Program Files (x86)\Internet Speed Checker
2014-08-23 13:28:25 ----D---- C:\Program Files (x86)\ESET
2014-08-16 19:58:29 ----A---- C:\awh9C18.tmp
2014-08-16 19:54:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-08-16 14:25:05 ----D---- C:\Windows\SoftwareDistribution
2014-08-15 22:04:16 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2014-08-15 21:58:17 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-15 21:58:17 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-15 07:34:42 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-15 07:34:40 ----A---- C:\Windows\system32\cdd.dll
2014-08-15 07:34:10 ----A---- C:\Windows\system32\mshtml.dll
2014-08-15 07:34:03 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-15 07:33:59 ----A---- C:\Windows\system32\ieframe.dll
2014-08-15 07:33:56 ----A---- C:\Windows\system32\jscript9.dll
2014-08-15 07:33:55 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-15 07:33:55 ----A---- C:\Windows\system32\iertutil.dll
2014-08-15 07:33:54 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-15 07:33:53 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-15 07:33:53 ----A---- C:\Windows\system32\urlmon.dll
2014-08-15 07:33:52 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-15 07:33:51 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-15 07:33:51 ----A---- C:\Windows\system32\wininet.dll
2014-08-15 07:33:50 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-15 07:33:49 ----A---- C:\Windows\system32\jscript.dll
2014-08-15 07:33:49 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-15 07:33:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-15 07:33:47 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-15 07:33:46 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-15 07:33:46 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-15 07:33:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-15 07:33:45 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-08-15 07:33:45 ----A---- C:\Windows\system32\uxtheme.dll
2014-08-15 07:33:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-15 07:33:44 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-08-15 07:33:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-15 07:33:44 ----A---- C:\Windows\system32\iesysprep.dll
2014-08-15 07:33:43 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-15 07:33:43 ----A---- C:\Windows\system32\msrating.dll
2014-08-15 07:33:43 ----A---- C:\Windows\system32\iernonce.dll
2014-08-15 07:33:43 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-15 07:33:43 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-15 07:33:42 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2014-08-15 07:33:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-15 07:33:42 ----A---- C:\Windows\system32\UXInit.dll
2014-08-15 07:33:41 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2014-08-15 07:33:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-15 07:33:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-15 07:33:41 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-15 07:33:41 ----A---- C:\Windows\system32\iesetup.dll
2014-08-15 07:33:15 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-15 07:33:15 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-15 07:33:09 ----A---- C:\Windows\system32\win32k.sys
2014-08-15 07:33:08 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-15 07:33:08 ----A---- C:\Windows\system32\gdi32.dll
2014-08-15 07:33:04 ----A---- C:\Windows\system32\twinui.dll
2014-08-15 07:33:03 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-08-15 07:33:02 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-15 07:33:02 ----A---- C:\Windows\system32\msi.dll
2014-08-15 07:33:02 ----A---- C:\Windows\system32\actxprxy.dll
2014-08-15 07:33:01 ----A---- C:\Windows\system32\authui.dll
2014-08-15 07:32:59 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-15 07:32:59 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-15 07:32:59 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-08-15 07:32:59 ----A---- C:\Windows\system32\msihnd.dll
2014-08-15 07:32:59 ----A---- C:\Windows\system32\consent.exe
2014-08-15 07:32:42 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2014-08-15 07:32:42 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-08-13 09:21:21 ----A---- C:\awh5A3A.tmp
2014-08-12 21:12:40 ----D---- C:\Program Files (x86)\globalUpdate
2014-08-12 21:12:37 ----D---- C:\Program Files (x86)\HD-V1.9
2014-08-12 21:12:14 ----D---- C:\Users\Ondra\AppData\Roaming\Seznam.cz
2014-08-12 13:34:06 ----A---- C:\Windows\system32\drivers\nethfdrv.sys
2014-08-12 13:33:46 ----A---- C:\Windows\SYSWOW64\netupdsrv.exe
2014-08-12 13:33:38 ----A---- C:\Windows\SYSWOW64\installd.exe
2014-08-12 13:33:26 ----A---- C:\Windows\SYSWOW64\nethtsrv.exe
2014-08-12 13:33:18 ----A---- C:\Windows\SYSWOW64\hfnapi.dll
2014-08-12 13:33:10 ----A---- C:\Windows\SYSWOW64\hfpapi.dll
2014-07-27 08:41:16 ----D---- C:\ProgramData\Bitstream
2014-07-27 08:28:19 ----A---- C:\Windows\system32\FNTCACHE.DAT

======List of files/folders modified in the last 1 month======

2014-08-24 09:42:24 ----RD---- C:\Program Files
2014-08-24 09:42:09 ----D---- C:\Windows\Temp
2014-08-24 09:41:18 ----D---- C:\Windows\Prefetch
2014-08-24 09:35:40 ----A---- C:\Windows\SYSWOW64\log.txt
2014-08-24 09:33:59 ----D---- C:\ProgramData\PDFC
2014-08-24 09:33:23 ----A---- C:\Windows\SYSWOW64\LOCALSERVICE.INI
2014-08-24 09:33:19 ----A---- C:\Windows\SYSWOW64\bscs.ini
2014-08-23 22:00:01 ----D---- C:\Windows\system32\sru
2014-08-23 18:08:15 ----D---- C:\Windows\system32\config
2014-08-23 17:15:34 ----D---- C:\Program Files\PCDApp
2014-08-23 17:14:19 ----A---- C:\Windows\SYSWOW64\LOCALDEVICE.INI
2014-08-23 15:15:26 ----D---- C:\Windows\system32\Tasks
2014-08-23 15:15:13 ----RD---- C:\Windows\System32
2014-08-23 15:15:12 ----HD---- C:\ProgramData
2014-08-23 15:15:05 ----RD---- C:\Program Files (x86)
2014-08-23 15:11:21 ----D---- C:\Windows\system32\Drivers
2014-08-23 15:10:33 ----D---- C:\Windows\Tasks
2014-08-23 15:09:46 ----SHD---- C:\Windows\Installer
2014-08-23 15:07:13 ----D---- C:\Firefox
2014-08-23 15:02:20 ----D---- C:\Windows\Microsoft.NET
2014-08-23 14:55:56 ----D---- C:\Program Files (x86)\FLVM Player
2014-08-23 14:55:55 ----D---- C:\Program Files (x86)\demoni 2013 horor avi cz dabing cely film
2014-08-23 14:12:44 ----SHD---- C:\System Volume Information
2014-08-23 13:28:43 ----D---- C:\Users\Ondra\AppData\Roaming\Oxy
2014-08-20 19:58:08 ----RSD---- C:\Windows\assembly
2014-08-20 19:14:38 ----D---- C:\ProgramData\Microsoft Help
2014-08-17 20:37:49 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2014-08-17 19:24:43 ----D---- C:\Windows\rescache
2014-08-17 09:55:30 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-08-16 20:00:41 ----D---- C:\Windows\Inf
2014-08-16 20:00:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-16 19:56:50 ----D---- C:\Users\Ondra\AppData\Roaming\QuickScan
2014-08-16 19:54:13 ----D---- C:\Windows\WinSxS
2014-08-16 19:54:10 ----D---- C:\Windows\SysWOW64
2014-08-16 19:51:31 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-16 19:51:31 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-16 19:51:31 ----D---- C:\Windows\system32\en-US
2014-08-16 19:51:31 ----D---- C:\Windows\system32\cs-CZ
2014-08-16 19:51:30 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-16 19:51:28 ----D---- C:\Program Files\Internet Explorer
2014-08-16 19:50:57 ----RD---- C:\Windows\ToastData
2014-08-16 19:50:46 ----D---- C:\Windows\system32\DriverStore
2014-08-16 17:33:52 ----HD---- C:\Program Files\WindowsApps
2014-08-16 16:07:04 ----D---- C:\Windows\AUInstallAgent
2014-08-16 14:25:05 ----D---- C:\Windows
2014-08-16 11:45:51 ----D---- C:\Windows\CbsTemp
2014-08-16 10:26:44 ----D---- C:\Windows\system32\MRT
2014-08-15 22:16:19 ----A---- C:\Windows\system32\MRT.exe
2014-08-15 22:11:21 ----D---- C:\Windows\system32\catroot2
2014-08-13 19:31:55 ----RD---- C:\Program Files (x86)\Skype
2014-08-12 21:11:59 ----D---- C:\Program Files (x86)\Common Files
2014-07-27 08:41:23 ----D---- C:\ProgramData\Corel
2014-07-27 08:28:35 ----D---- C:\Windows\Minidump
2014-07-26 23:41:59 ----A---- C:\SROF.ini
2014-07-26 20:26:11 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-26 20:26:11 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;@oem7.inf,%service_desc%;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2012-08-22 31040]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2012-07-31 645952]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 dtsoftbus01;@oem30.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2013-04-14 283200]
R1 nethfdrv;nethfdrv; \??\C:\Windows\system32\drivers\nethfdrv.sys [2014-08-12 46160]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R3 Accelerometer;@oem7.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2012-08-22 43328]
R3 BtAudioBusSrv;@oem15.inf,%SvcDesc%;IVT Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2012-07-20 56904]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2012-08-14 48736]
R3 HpqKbFiltr;@oem5.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\Windows\System32\drivers\HpqKbFiltr.sys [2012-08-27 26504]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-23 9000256]
R3 IntcDAud;@oem20.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 JMCR;JMCR; C:\Windows\System32\drivers\jmcr.sys [2012-07-31 175928]
R3 MEIx64;@oem29.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2013-01-11 64624]
R3 netr28x;@oem34.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-12-04 2505904]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
R3 rtbth;@oem33.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\Windows\System32\drivers\rtbth.sys [2013-12-02 1204424]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-06-13 683664]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;UMDF Reflector service for SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 SPUVCbv;@oem21.inf,%SPUVCb.ServiceName%;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2012-08-03 1062008]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-08-06 540160]
R3 SynTP;@oem32.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-10-30 549104]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-26 11926528]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-06-29 360448]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 DAMDrv;DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [2012-07-25 64832]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 NETwNe64;@netwne64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNe64.sys [2012-06-02 11400192]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2012-08-15 41272]
S3 SmbDrvI;SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [2012-08-15 43832]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-06 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-08-14 1578496]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2012-08-25 488824]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-08-15 85504]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2012-08-29 523680]
R2 hpsrv;@oem7.inf,%hpservice_desc%;HP Service; C:\Windows\system32\Hpservice.exe [2012-08-22 33600]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-19 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-19 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-19 277824]
R2 NetHttpService;Network HTTP Support Service; C:\Windows\SysWOW64\nethtsrv.exe [2014-08-12 179712]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2012-07-17 1134624]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 ServiceUpdater;Network Support Service Updater; C:\Windows\SysWOW64\netupdsrv.exe [2014-08-12 162304]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-06 321536]
R2 StartW8Service;StartW8Service; C:\Program Files (x86)\StartW8\bin\StartW8Service.exe [2012-12-19 51200]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-19 365376]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2012-07-19 2714232]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-08-14 138752]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-11 1001376]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-23 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-09 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-12 51648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-25 276288]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2012-08-01 477088]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-23 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-09 116648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-11-27 29952]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Odinstalujte Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam

:arrow: Udelejte MBAM dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#3 Příspěvek od gago1 »

skoušel jsem to dvakrát ale pokaždé když dám exportovat log tak se program kousne a vypne

pokaždé sken trval cca 2 hod. a našlo to okolo 1000 hrozeb
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#4 Příspěvek od vyosek »

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#5 Příspěvek od gago1 »

# AdwCleaner v3.308 - Report created 24/08/2014 at 16:12:14
# Updated 20/08/2014 by Xplode
# Operating System : Windows 8 (64 bits)
# Username : Ondra - ONDRA-NTB
# Running from : C:\Users\Ondra\Downloads\adwcleaner_3.308.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
Service Deleted : nethfdrv
Service Deleted : NethxxpService
Service Deleted : ServiceUpdater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\FLVM Player
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\Internet Speed Checker
Folder Deleted : C:\Program Files\PCDApp
Folder Deleted : C:\Users\Ondra\AppData\Local\GCC
Folder Deleted : C:\Users\Ondra\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Ondra\AppData\Local\Oxy
Folder Deleted : C:\Users\Ondra\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Ondra\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\Ondra\AppData\Local\Temp\eIntaller
Folder Deleted : C:\Users\Ondra\AppData\Local\Temp\mt_ffx
Folder Deleted : C:\Users\Ondra\AppData\LocalLow\Internet Speed Checker
Folder Deleted : C:\Users\Ondra\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Ondra\AppData\Roaming\Oxy
Folder Deleted : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Folder Deleted : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player
Folder Deleted : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oxy
Folder Deleted : C:\Users\Ondra\Documents\PCSpeedUp
Folder Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp
Folder Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihecgifecjdmjjmkgnobfpladefgige
File Deleted : C:\Windows\SysWOW64\hfpapi.dll
File Deleted : C:\Windows\SysWOW64\installd.exe
File Deleted : C:\Windows\SysWOW64\nethtsrv.exe
File Deleted : C:\Windows\SysWOW64\netupdsrv.exe
File Deleted : C:\Windows\System32\drivers\nethfdrv.sys
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.golsearch.com_0.localstorage
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.golsearch.com_0.localstorage-journal
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage
File Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.delta-search.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : BitGuard
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : Oxy
Task Deleted : PC SpeedUp Service Deactivator
Task Deleted : PileFile logon
Task Deleted : PileFile reminder
Task Deleted : Windows Updater
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-1
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-11
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-2
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-4
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-5
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-5_user
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-6
Task Deleted : 010aae86-234a-482b-8ed2-17e286f2bce4-7
Task Deleted : 0864773b-cee5-4aba-a445-37192f97832a
Task Deleted : 1ce23471-b063-47c0-b9e9-1e097165ae0e
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-1
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-11
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-2
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-3
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-4
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-6
Task Deleted : 4c7d9f47-8186-4362-9bc8-2636ef05d9a7-7
Task Deleted : 59f45487-2a6b-4d4b-9794-785c25a397ec
Task Deleted : fce8c2d7-5c51-4c23-8076-a0d9f3f93126

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@bettersurfplus.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mihecgifecjdmjjmkgnobfpladefgige
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKCU\Software\a53dfdde239bd13
Key Deleted : HKLM\SOFTWARE\a53dfdde239bd13
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061752.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061752.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061752.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061752.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061792.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061792.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061792.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0061792.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0CFBE80D-5608-4309-A0F5-3B1414833432}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171152}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171192}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172292}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175592}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176692}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644174452}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644174492}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0CFBE80D-5608-4309-A0F5-3B1414833432}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611171152}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611171192}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0CFBE80D-5608-4309-A0F5-3B1414833432}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611171152}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611171192}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171152}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171192}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172252}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172292}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175552}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175592}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176652}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176692}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171152}
Key Deleted : HKCU\Software\BABSOLUTION
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\BetterSurf
Key Deleted : HKLM\SOFTWARE\DataMngr
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\MediaPlayerV1
Key Deleted : HKLM\SOFTWARE\MediaViewerV1
Key Deleted : HKLM\SOFTWARE\MediaViewV1
Key Deleted : HKLM\SOFTWARE\MediaWatchV1
Key Deleted : HKLM\SOFTWARE\Internet Speed Checker
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Speed Checker
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17054

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Homepage] : hxxp://isearch.babylon.com/?affID=119816&babsrc=HP_ss_bayi&mntrId=AE146894230BC30A
Deleted [Extension] : flcjcajklmlbpmgckpcmnampagbhhmcp
Deleted [Extension] : mihecgifecjdmjjmkgnobfpladefgige

*************************

AdwCleaner[R0].txt - [19064 octets] - [24/08/2014 15:33:41]
AdwCleaner[S0].txt - [18531 octets] - [24/08/2014 16:12:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [18592 octets] ##########
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#6 Příspěvek od vyosek »

Jeste poprosim o Zoek
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#7 Příspěvek od gago1 »

ten nic nedela
je tam uz dlouho napsane tohle:

Zoek.exe v5.0.0.0 Updated 24-08-2014
Tool run by Ondra on ne 24. 08. 2014 at 16:20:03,75.
Microsoft Windows 8 6.2.9200 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ondra\Desktop\zoek\zoek.com [Scan all users] [Script inserted]

===== Runcheck 16:21:13,04 =====

--- Create Environment Variables 16:21:14,65
--- Create System Restore Point 16:21:23,12
--- Checking Input 16:21:51,85
--- Reset Hosts File 16:21:58,71
--- AU AppData Check 16:21:59,63
--- Remove From Windows Installer 16:22:04,32
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#8 Příspěvek od vyosek »

:arrow: Tak Zoek ukoncete

:arrow: Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/
  • Ulozte nejlepe na Plochu a rozbalte
  • Spustte kliknutim na mbar
  • Nyni postupne kliknete na Next a Update
  • Po dokonceni update (aktualizace) databaze kliknete opet na Next
  • Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
  • Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
  • Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
  • Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
  • PC bude restartovan
  • Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#9 Příspěvek od gago1 »

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1012

(c) Malwarebytes Corporation 2011-2012

OS version: 6.2.9200 Windows 8 x64

Account is Administrative

Internet Explorer version: 10.0.9200.17054

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.395000 GHz
Memory total: 4169371648, free: 2094444544

Downloaded database version: v2014.08.24.04
Downloaded database version: v2014.08.21.01
=======================================
Done!
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: A50E1C7D

GPT Protective MBR Partition information:

Partition 0 type is EFI-GPT (0xee)
Partition is NOT ACTIVE.
Partition starts at LBA: 1 Numsec = 4294967295

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

GPT Partition information:

GPT Header Signature 4546492050415254
GPT Header Revision 65536 Size 92 CRC 1970434722
GPT Header CurrentLba = 1 BackupLba 976773167
GPT Header FirstUsableLba 34 LastUsableLba 976773134
GPT Header Guid dbfecebe-cb20-4924-aac-795ede98e3c
GPT Header Contains 128 partition entries starting at LBA 2
GPT Header Partition entry size = 128

Backup GPT header Signature 4546492050415254
Backup GPT header Revision 65536 Size 92 CRC 1970434722
Backup GPT header CurrentLba = 976773167 BackupLba 1
Backup GPT header FirstUsableLba 34 LastUsableLba 976773134
Backup GPT header Guid dbfecebe-cb20-4924-aac-795ede98e3c
Backup GPT header Contains 128 partition entries starting at LBA 976773135
Backup GPT header Partition entry size = 128

Partition 0 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac
Partition ID e004c7bb-f548-474c-b845-f1455a47527b
FirstLBA 2048 Last LBA 2050047
Attributes 1
Partition Name

Partition 1 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b
Partition ID 54000ce6-364b-4d93-b333-aa90dae193c
FirstLBA 2050048 Last LBA 2254847
Attributes 0
Partition Name EFI system partition

GPT Partition 1 is bootable
Partition 2 Type e3c9e316-b5c-4db8-817d-f92df0215ae
Partition ID b1c1f752-162d-4d3f-a776-96a9d2234a9b
FirstLBA 2254848 Last LBA 2516991
Attributes 0
Partition Name Microsoft reserved partition

Partition 3 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Partition ID 8ae41054-9494-4287-b6e8-1b3553e68ade
FirstLBA 2516992 Last LBA 945588223
Attributes 0
Partition Name Basic data partition

Partition 4 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Partition ID c32b45e-8eb9-40f3-abb6-3bcfda5934f
FirstLBA 945588224 Last LBA 972572671
Attributes 1
Partition Name Basic data partition

Partition 5 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Partition ID 43d31352-29a2-49fe-9d92-8934b8de9524
FirstLBA 972572672 Last LBA 976760831
Attributes 1
Partition Name Basic data partition

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Done!
Infected: C:\Windows\SysWOW64\dcgmnchwgq.exe --> [Trojan.BitMiner]
Infected: C:\Users\Ondra\AppData\Local\Temp\dgen.exe --> [Riskware.BitcoinMiner]
Infected: C:\Users\Ondra\AppData\Local\Temp\tmp4DA6\SUpdater.exe --> [Trojan.Downloader]
Infected: C:\Users\Ondra\AppData\Local\Temp\tmp5656\SUpdater.exe --> [Trojan.Downloader]
Infected: C:\Users\Ondra\Downloads\VLCPlus_Setup.exe --> [Adware.Linkular]
Infected: C:\Users\Ondra\Downloads\VLCPlus_Setup (1).exe --> [Adware.Linkular]
Infected: C:\Users\Ondra\Downloads\VLCPlus_Setup (2).exe --> [Adware.Linkular]
Infected: C:\Users\Ondra\Downloads\VLCPlus_Setup (3).exe --> [Adware.Linkular]
Infected: C:\Windows\Inf\msstp.vbe --> [Trojan.Agent.SCR]
Infected: C:\PROGRAM FILES (X86)\Drakensang Online Hack Updated [29.12.2013] --> [Trojan.Agent.CK]
Infected: C:\Program Files (x86)\Drakensang Online Hack Updated [29.12.2013]\Drakensang Online Hack Updated [29.12.2013].rar --> [Trojan.Agent.CK]
Infected: C:\Program Files (x86)\Drakensang Online Hack Updated [29.12.2013]\unins000.dat --> [Trojan.Agent.CK]
Infected: C:\Program Files (x86)\Drakensang Online Hack Updated [29.12.2013]\unins000.exe --> [Trojan.Agent.CK]
Infected: HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CF7CA903-C14D-8663-2AC7-6F5C2ED3AB1D}_is1 --> [Trojan.Agent.CK]
Infected: C:\Windows\Inf\mnchnuqcw --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\diablo130302.cl --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\diakgcn121016.cl --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\libidn-11.dll --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\librtmp.dll --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\libssh2.dll --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\phatk121016.cl --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\poclbm130302.cl --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\scrypt130511.cl --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\bitstreams --> [Trojan.Agent.BCM]
Infected: C:\Windows\Inf\mnchnuqcw\bitstreams\fpgaminer_top_fixed7_197MHz.ncd --> [Trojan.Agent.BCM]
Scan finished
Creating System Restore point...
Cleaning up...
Removal scheduling successful. System shutdown needed.
System shutdown occurred
=======================================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#10 Příspěvek od vyosek »

:arrow: Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#11 Příspěvek od gago1 »

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 08/24/2014 07:50:46 PM in x64 mode.
Windows Version: Windows 8

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* gpsvc => %windir%\system32\svchost.exe -k GPSvcGroup [Incorrect ImagePath]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:


127.0.0.1 localhost
::1 localhost

Program finished at: 08/24/2014 07:52:31 PM
Execution time: 0 hours(s), 1 minute(s), and 45 seconds(s)
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#12 Příspěvek od gago1 »

ComboFix 14-08-24.01 - Ondra . 08. 2014 19:56:23.1.2 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.3976.2208 [GMT 2:00]
Spuštěný z: c:\users\Ondra\Desktop\ComboFix.exe
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Ondra\ia_remove.sh9682.tmp
c:\windows\IsUn0405.exe
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-07-24 do 2014-08-24 )))))))))))))))))))))))))))))))
.
.
2014-08-24 18:06 . 2014-08-24 18:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-24 16:54 . 2014-08-24 17:09 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-08-24 14:19 . 2014-08-24 14:19 -------- d-----w- C:\zoek_backup
2014-08-24 13:34 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-08-24 13:33 . 2014-08-24 14:12 -------- d-----w- C:\AdwCleaner
2014-08-24 08:54 . 2014-08-24 08:54 687 ----a-w- C:\awh215A.tmp
2014-08-24 08:53 . 2014-08-24 17:35 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-24 08:53 . 2014-08-24 16:52 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-08-24 08:53 . 2014-08-24 08:53 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-24 08:53 . 2014-08-24 08:53 -------- d-----w- c:\programdata\Malwarebytes
2014-08-24 08:53 . 2014-05-12 05:26 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-08-24 08:53 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-08-24 07:42 . 2014-08-24 07:42 -------- d-----w- C:\rsit
2014-08-24 07:42 . 2014-08-24 07:42 -------- d-----w- c:\program files\trend micro
2014-08-24 07:38 . 2014-08-24 07:38 687 ----a-w- C:\awhC887.tmp
2014-08-24 07:37 . 2014-08-21 03:43 11319192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{802C147F-4186-4933-9ECC-6757CD5CFE3D}\mpengine.dll
2014-08-23 13:16 . 2014-08-23 13:16 687 ----a-w- C:\awh26F8.tmp
2014-08-23 13:15 . 2014-08-24 08:48 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-08-23 13:15 . 2014-08-24 08:49 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-08-23 11:28 . 2014-08-23 11:28 -------- d-----w- c:\program files (x86)\ESET
2014-08-16 17:58 . 2014-08-16 17:58 687 ----a-w- C:\awh9C18.tmp
2014-08-16 17:54 . 2014-08-02 00:15 704480 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-08-16 17:54 . 2014-08-02 00:15 105440 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-08-16 12:25 . 2014-08-16 12:27 -------- d-----w- c:\users\Ondra\AppData\Local\ElevatedDiagnostics
2014-08-15 20:04 . 2014-07-15 22:51 71168 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2014-08-15 19:58 . 2014-06-10 22:44 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-08-15 19:58 . 2014-06-10 22:43 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-08-15 05:34 . 2014-06-13 01:57 1453400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-08-15 05:34 . 2014-06-13 01:55 199680 ----a-w- c:\windows\system32\cdd.dll
2014-08-15 05:34 . 2014-07-24 12:09 19279872 ----a-w- c:\windows\system32\mshtml.dll
2014-08-15 05:32 . 2014-06-05 17:56 112984 ----a-w- c:\windows\system32\consent.exe
2014-08-15 05:32 . 2014-06-05 17:29 393216 ----a-w- c:\windows\system32\msihnd.dll
2014-08-15 05:32 . 2014-06-05 13:11 295424 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-08-15 05:32 . 2014-06-05 13:10 2037760 ----a-w- c:\windows\SysWow64\authui.dll
2014-08-15 05:32 . 2014-06-05 13:10 754176 ----a-w- c:\windows\SysWow64\actxprxy.dll
2014-08-15 05:32 . 2014-05-29 04:04 94552 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2014-08-15 05:32 . 2014-05-08 01:34 328024 ----a-w- c:\windows\system32\drivers\Classpnp.sys
2014-08-13 07:21 . 2014-08-13 07:21 687 ----a-w- C:\awh5A3A.tmp
2014-08-12 19:12 . 2014-08-24 11:16 -------- d-----w- c:\program files (x86)\HD-V1.9
2014-08-12 19:12 . 2014-08-12 19:12 -------- d-----w- c:\users\Ondra\AppData\Roaming\Seznam.cz
2014-08-12 19:11 . 2014-08-12 19:12 -------- d-----w- c:\program files (x86)\Common Files\Config
2014-08-12 11:33 . 2014-08-12 11:33 108544 ----a-w- c:\windows\SysWow64\hfnapi.dll
2014-07-28 10:25 . 2014-07-28 10:25 3060920 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1029\MSOINTL.DLL
2014-07-27 09:45 . 2014-07-27 09:45 5532368 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-07-27 09:45 . 2014-07-27 09:45 5233848 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-07-27 09:45 . 2014-07-27 09:45 26273464 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-07-27 09:41 . 2014-07-27 09:41 3633848 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1033\MSOINTL.DLL
2014-07-27 09:41 . 2014-07-27 09:41 7501528 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-07-27 09:41 . 2014-07-27 09:41 7259328 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-07-27 09:41 . 2014-07-27 09:41 654512 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSOSQM.EXE
2014-07-27 09:41 . 2014-07-27 09:41 36681400 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-07-27 09:41 . 2014-07-27 09:41 197328 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\LICLUA.EXE
2014-07-27 06:41 . 2014-07-27 06:41 -------- d-----w- c:\programdata\Bitstream
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-15 20:16 . 2013-04-09 07:17 99218768 ----a-w- c:\windows\system32\MRT.exe
2014-06-18 19:09 . 2014-06-18 19:09 346144 ----a-w- c:\windows\SysWow64\WindowsUpdateKB12695__4914_il70.exe
2014-06-17 23:27 . 2014-07-09 20:19 1440256 ----a-w- c:\windows\SysWow64\osk.exe
2014-06-17 23:24 . 2014-07-09 20:20 1557504 ----a-w- c:\windows\system32\osk.exe
2014-06-06 14:06 . 2014-07-09 20:19 596480 ----a-w- c:\windows\system32\qedit.dll
2014-06-06 10:17 . 2014-07-09 20:19 497152 ----a-w- c:\windows\SysWow64\qedit.dll
2014-06-02 22:33 . 2014-07-09 20:18 265216 ----a-w- c:\windows\system32\InkEd.dll
2014-05-29 23:31 . 2014-07-09 20:19 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-05-29 23:03 . 2014-07-09 20:19 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-05-29 23:02 . 2014-07-09 20:19 439808 ----a-w- c:\windows\system32\lsm.dll
2014-05-29 23:02 . 2014-07-09 20:19 1281536 ----a-w- c:\windows\system32\lsasrv.dll
2014-05-29 22:24 . 2014-07-09 20:19 576512 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2012-07-17 684064]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2012-08-29 334240]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-16 364032]
"HP HD Webcam Driver_Monitor"="c:\program files (x86)\HP HD Webcam Driver\monitor.exe" [2012-07-26 303480]
"CLMLServer_For_P2G8"="c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2012-06-08 111120]
"CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2012-07-24 491120]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-29 91432]
"StartW8Button"="c:\program files (x86)\StartW8\bin\StartW8Button.exe" [2012-12-19 52224]
"mnchwgqSrv"="c:\windows\system32\mnchwgq.vbe" [2014-03-05 7670]
"mnchnuqcwSrv"="c:\windows\inf\mnchnuqcw.vbe" [2014-01-19 1342]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2012-08-01 20:56 75680 ----a-w- c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
R3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
R3 NETwNe64;@netwne64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNe64.sys;c:\windows\SYSNATIVE\DRIVERS\NETwNe64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 StartW8Service;StartW8Service;c:\program files (x86)\StartW8\bin\StartW8Service.exe;c:\program files (x86)\StartW8\bin\StartW8Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys;c:\windows\SYSNATIVE\drivers\jmcr.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SensorsServiceDriver;Služba Reflektor UMDF pro knihovnu SensorsServiceDriver;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\System32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
S3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-16 13:41 1104200 ----a-w- c:\program files (x86)\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-08-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-04-08 22:11]
.
2014-08-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-04-08 22:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-25 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-25 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-25 441152]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-08-06 1425408]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.enhanced-search.com/?affID=119816&b ... 94230BC30A
mDefault_Page_URL = hxxp://www.bing.com?pc=CMNTDFJS
mStart Page = hxxp://www.bing.com?pc=CMNTDFJS
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\MICROS~1\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-MSStp - c:\windows\system32\msstp.vbe
AddRemove-FLVM Player - c:\program files (x86)\FLVM Player\FLVPlayerUninstaller.exe
AddRemove-GigaClicks Crawler - c:\users\Ondra\AppData\Local\GCC\uninstall.exe
AddRemove-{FF27F674-821E-4BA2-985B-DDF539C2CD03} - c:\program files (x86)\InstallShield Installation Information\{FF27F674-821E-4BA2-985B-DDF539C2CD03}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2014-08-24 20:19:32
ComboFix-quarantined-files.txt 2014-08-24 18:19
.
Před spuštěním: 271 148 974 080 bytes free
Po spuštění: 271 568 846 848 bytes free
.
- - End Of File - - D836F1D5F83C7DCED21A31D78807DF2B
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#13 Příspěvek od vyosek »

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    KillAll::

Folder::
c:\program files (x86)\HD-V1.9
c:\program files (x86)\Skype\Toolbars

Collect::
c:\windows\system32\mnchwgq.vbe
c:\windows\inf\mnchnuqcw.vbe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer_For_P2G8"=-
"CLVirtualDrive"=-
"RemoteControl10"=-
"mnchwgqSrv"=-
"mnchnuqcwSrv"=-

Driver::
c2cautoupdatesvc
c2cpnrsvc

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

DDS::
uStart Page = hxxp://www.enhanced-search.com/?affID=1 ... 94230BC30A
mDefault_Page_URL = hxxp://www.bing.com?pc=CMNTDFJS
mStart Page = hxxp://www.bing.com?pc=CMNTDFJS

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

RegNull::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]

ClearJavaCache::

Reboot::
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gago1
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 24 srp 2014 08:39

Re: v prohlížeči mi vyskakuje stále nějaké okna

#14 Příspěvek od gago1 »

ComboFix 14-08-24.01 - Ondra . 08. 2014 20:37:54.2.2 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.3976.2344 [GMT 2:00]
Spuštěný z: c:\users\Ondra\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ondra\Desktop\CFScript.txt
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\HD-V1.9
c:\program files (x86)\HD-V1.9\1293297481.mxaddon
c:\program files (x86)\HD-V1.9\1a8f1759-2cf9-4675-92e5-640cca9d7335.crx
c:\program files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7.crx
c:\program files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7.xpi
c:\program files (x86)\HD-V1.9\4c7d9f47-8186-4362-9bc8-2636ef05d9a7_.xpi
c:\program files (x86)\HD-V1.9\b7216704-c920-4c7a-8d6e-071e3bd5d191.crx
c:\program files (x86)\HD-V1.9\bgNova.html
c:\program files (x86)\HD-V1.9\d638262c-7acd-4f09-8222-71364042d272.dll
c:\program files (x86)\HD-V1.9\Interop.IWshRuntimeLibrary.dll
c:\program files (x86)\HD-V1.9\Newtonsoft.Json.dll
c:\program files (x86)\HD-V1.9\SuperSocket.ClientEngine.Common.dll
c:\program files (x86)\HD-V1.9\SuperSocket.ClientEngine.Core.dll
c:\program files (x86)\HD-V1.9\SuperSocket.ClientEngine.Protocol.dll
c:\program files (x86)\HD-V1.9\Uninstall.exe
c:\program files (x86)\HD-V1.9\utils.exe
c:\program files (x86)\HD-V1.9\WebSocket4Net.dll
c:\program files (x86)\Skype\Toolbars
c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
c:\program files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx
c:\program files (x86)\Skype\Toolbars\Internet Explorer x64\icon.ico
c:\program files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll
c:\program files (x86)\Skype\Toolbars\Internet Explorer\icon.ico
c:\program files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
c:\windows\inf\mnchnuqcw.vbe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_c2cautoupdatesvc
-------\Service_c2cpnrsvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-07-24 do 2014-08-24 )))))))))))))))))))))))))))))))
.
.
2014-08-24 18:47 . 2014-08-24 18:50 -------- d-----w- c:\users\Ondra\AppData\Local\temp
2014-08-24 18:47 . 2014-08-24 18:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-24 16:54 . 2014-08-24 18:48 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-08-24 14:19 . 2014-08-24 14:19 -------- d-----w- C:\zoek_backup
2014-08-24 13:34 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-08-24 13:33 . 2014-08-24 14:12 -------- d-----w- C:\AdwCleaner
2014-08-24 08:54 . 2014-08-24 08:54 687 ----a-w- C:\awh215A.tmp
2014-08-24 08:53 . 2014-08-24 18:49 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-08-24 08:53 . 2014-08-24 16:52 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-08-24 08:53 . 2014-08-24 08:53 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-08-24 08:53 . 2014-08-24 08:53 -------- d-----w- c:\programdata\Malwarebytes
2014-08-24 08:53 . 2014-05-12 05:26 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-08-24 08:53 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-08-24 07:42 . 2014-08-24 07:42 -------- d-----w- C:\rsit
2014-08-24 07:42 . 2014-08-24 07:42 -------- d-----w- c:\program files\trend micro
2014-08-24 07:38 . 2014-08-24 07:38 687 ----a-w- C:\awhC887.tmp
2014-08-24 07:37 . 2014-08-21 03:43 11319192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{802C147F-4186-4933-9ECC-6757CD5CFE3D}\mpengine.dll
2014-08-23 13:16 . 2014-08-23 13:16 687 ----a-w- C:\awh26F8.tmp
2014-08-23 13:15 . 2014-08-24 08:48 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-08-23 13:15 . 2014-08-24 08:49 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2014-08-23 11:28 . 2014-08-23 11:28 -------- d-----w- c:\program files (x86)\ESET
2014-08-16 17:58 . 2014-08-16 17:58 687 ----a-w- C:\awh9C18.tmp
2014-08-16 17:54 . 2014-08-02 00:15 704480 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-08-16 17:54 . 2014-08-02 00:15 105440 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-08-16 12:25 . 2014-08-16 12:27 -------- d-----w- c:\users\Ondra\AppData\Local\ElevatedDiagnostics
2014-08-15 20:04 . 2014-07-15 22:51 71168 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2014-08-15 19:58 . 2014-06-10 22:44 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-08-15 19:58 . 2014-06-10 22:43 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-08-15 05:34 . 2014-06-13 01:57 1453400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-08-15 05:34 . 2014-06-13 01:55 199680 ----a-w- c:\windows\system32\cdd.dll
2014-08-15 05:34 . 2014-07-24 12:09 19279872 ----a-w- c:\windows\system32\mshtml.dll
2014-08-15 05:32 . 2014-06-05 17:56 112984 ----a-w- c:\windows\system32\consent.exe
2014-08-15 05:32 . 2014-06-05 17:29 393216 ----a-w- c:\windows\system32\msihnd.dll
2014-08-15 05:32 . 2014-06-05 13:11 295424 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-08-15 05:32 . 2014-06-05 13:10 2037760 ----a-w- c:\windows\SysWow64\authui.dll
2014-08-15 05:32 . 2014-06-05 13:10 754176 ----a-w- c:\windows\SysWow64\actxprxy.dll
2014-08-15 05:32 . 2014-05-29 04:04 94552 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2014-08-15 05:32 . 2014-05-08 01:34 328024 ----a-w- c:\windows\system32\drivers\Classpnp.sys
2014-08-13 07:21 . 2014-08-13 07:21 687 ----a-w- C:\awh5A3A.tmp
2014-08-12 19:12 . 2014-08-12 19:12 -------- d-----w- c:\users\Ondra\AppData\Roaming\Seznam.cz
2014-08-12 19:11 . 2014-08-12 19:12 -------- d-----w- c:\program files (x86)\Common Files\Config
2014-08-12 11:33 . 2014-08-12 11:33 108544 ----a-w- c:\windows\SysWow64\hfnapi.dll
2014-07-28 10:25 . 2014-07-28 10:25 3060920 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1029\MSOINTL.DLL
2014-07-27 09:45 . 2014-07-27 09:45 5532368 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-07-27 09:45 . 2014-07-27 09:45 5233848 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-07-27 09:45 . 2014-07-27 09:45 26273464 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-07-27 09:41 . 2014-07-27 09:41 3633848 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\1033\MSOINTL.DLL
2014-07-27 09:41 . 2014-07-27 09:41 7501528 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\CMigrate.exe
2014-07-27 09:41 . 2014-07-27 09:41 7259328 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\Csi.dll
2014-07-27 09:41 . 2014-07-27 09:41 654512 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSOSQM.EXE
2014-07-27 09:41 . 2014-07-27 09:41 36681400 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\MSO.DLL
2014-07-27 09:41 . 2014-07-27 09:41 197328 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE15\LICLUA.EXE
2014-07-27 06:41 . 2014-07-27 06:41 -------- d-----w- c:\programdata\Bitstream
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-15 20:16 . 2013-04-09 07:17 99218768 ----a-w- c:\windows\system32\MRT.exe
2014-06-18 19:09 . 2014-06-18 19:09 346144 ----a-w- c:\windows\SysWow64\WindowsUpdateKB12695__4914_il70.exe
2014-06-17 23:27 . 2014-07-09 20:19 1440256 ----a-w- c:\windows\SysWow64\osk.exe
2014-06-17 23:24 . 2014-07-09 20:20 1557504 ----a-w- c:\windows\system32\osk.exe
2014-06-06 14:06 . 2014-07-09 20:19 596480 ----a-w- c:\windows\system32\qedit.dll
2014-06-06 10:17 . 2014-07-09 20:19 497152 ----a-w- c:\windows\SysWow64\qedit.dll
2014-06-02 22:33 . 2014-07-09 20:18 265216 ----a-w- c:\windows\system32\InkEd.dll
2014-05-29 23:31 . 2014-07-09 20:19 452608 ----a-w- c:\windows\SysWow64\SHCore.dll
2014-05-29 23:03 . 2014-07-09 20:19 588288 ----a-w- c:\windows\system32\SHCore.dll
2014-05-29 23:02 . 2014-07-09 20:19 439808 ----a-w- c:\windows\system32\lsm.dll
2014-05-29 23:02 . 2014-07-09 20:19 1281536 ----a-w- c:\windows\system32\lsasrv.dll
2014-05-29 22:24 . 2014-07-09 20:19 576512 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-07-27 09:45 1730256 ----a-w- c:\program files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2012-07-17 684064]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2012-08-29 334240]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-16 364032]
"HP HD Webcam Driver_Monitor"="c:\program files (x86)\HP HD Webcam Driver\monitor.exe" [2012-07-26 303480]
"StartW8Button"="c:\program files (x86)\StartW8\bin\StartW8Button.exe" [2012-12-19 52224]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2012-08-01 20:56 75680 ----a-w- c:\windows\System32\DeviceNP.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]
R3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]
R3 NETwNe64;@netwne64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNe64.sys;c:\windows\SYSNATIVE\DRIVERS\NETwNe64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 StartW8Service;StartW8Service;c:\program files (x86)\StartW8\bin\StartW8Service.exe;c:\program files (x86)\StartW8\bin\StartW8Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
S3 BthLEEnum;Ovladač úspory energie technologie Bluetooth;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys;c:\windows\SYSNATIVE\drivers\jmcr.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SensorsServiceDriver;Služba Reflektor UMDF pro knihovnu SensorsServiceDriver;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\System32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
S3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-16 13:41 1104200 ----a-w- c:\program files (x86)\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-25 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-25 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-25 441152]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-08-06 1425408]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://www.bing.com?pc=CMNTDFJS
mStart Page = hxxp://www.bing.com?pc=CMNTDFJS
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\program files\MICROS~1\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-FLVM Player - c:\program files (x86)\FLVM Player\FLVPlayerUninstaller.exe
AddRemove-GigaClicks Crawler - c:\users\Ondra\AppData\Local\GCC\uninstall.exe
AddRemove-HD-V1.9 - c:\program files (x86)\HD-V1.9\Uninstall.exe
AddRemove-{FF27F674-821E-4BA2-985B-DDF539C2CD03} - c:\program files (x86)\InstallShield Installation Information\{FF27F674-821E-4BA2-985B-DDF539C2CD03}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2014-08-24 21:01:52 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-08-24 19:01
ComboFix2.txt 2014-08-24 18:19
.
Před spuštěním: 271 649 112 064 bytes free
Po spuštění: 270 917 931 008 bytes free
.
- - End Of File - - 8856DDDB32A6987AB527CCCEF3F11453
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: v prohlížeči mi vyskakuje stále nějaké okna

#15 Příspěvek od vyosek »

Jak se chova PC???
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“