Preventivka - malware, ci spyware

[czechuser]

Logfile of random's system information tool 1.10 (written by random/random)
Run by vandy at 2015-02-24 14:53:49
Microsoft Windows 7 Ultimate
System drive C: has 128 GB (42%) free of 302 GB
Total RAM: 3071 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:54:52, on 24.2.2015
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\LibreOffice 4\program\swriter.exe
C:\Program Files\LibreOffice 4\program\soffice.exe
C:\Program Files\LibreOffice 4\program\soffice.bin
C:\Program Files\AVG\AVG2015\avgcfgex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\vandy\Downloads\RSIT.exe
C:\Program Files\trend micro\vandy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={C4656872- ... 2015-02-09 12:55:39&v=4.0.6.10&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1948107362-261335881-2723143033-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download video on this page - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300
O8 - Extra context menu item: Download video this links to - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/301
O9 - Extra button: Download Video - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O9 - Extra 'Tools' menuitem: Download video on this page - {B4FECE59-6D0A-4EE6-A07F-E6A94F846E55} - res://C:\Program Files\Tomabo\YouTube Video Downloader\YTVD_IE.dll/300 (file missing)
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6170 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-19 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-19 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2015-02-10 3710416]
"NvBackend"=C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585744]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-18 271744]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27 558496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2015-01-23 31087200]
"BitTorrent"=C:\Users\vandy\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-02-10 1742936]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe"="C:\Program Files\Tomabo\YouTube Video Downloader\YouTubeVideoDownloader.exe:*:Enabled:YouTube Video Downloader"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-24 14:53:52 ----D---- C:\Program Files\trend micro
2015-02-24 14:53:49 ----D---- C:\rsit
2015-02-24 14:44:54 ----D---- C:\Program Files\Wireshark
2015-02-23 18:50:01 ----D---- C:\zbrush-female-face
2015-02-23 15:30:08 ----D---- C:\Program Files\EPUB Converter Tool
2015-02-23 15:27:10 ----D---- C:\convertepub-to-pdf
2015-02-23 15:01:11 ----D---- C:\ebooks
2015-02-23 13:40:12 ----D---- C:\zbrushtuto
2015-02-22 17:50:30 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2015-02-22 17:48:51 ----D---- C:\Program Files\Adobe
2015-02-22 17:42:42 ----D---- C:\ProgramData\Package Cache
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files\Adobe
2015-02-22 17:33:54 ----D---- C:\Users\vandy\AppData\Roaming\Macromedia
2015-02-22 17:33:43 ----D---- C:\ProgramData\Adobe
2015-02-22 06:11:45 ----D---- C:\Program Files\Pixologic
2015-02-21 19:25:50 ----D---- C:\zbrush4r7
2015-02-21 16:20:09 ----AD---- C:\ProgramData\Reprise
2015-02-21 16:20:05 ----D---- C:\Users\vandy\AppData\Roaming\SketchUp
2015-02-21 16:14:31 ----D---- C:\ProgramData\SketchUp
2015-02-21 16:14:30 ----D---- C:\Program Files\SketchUp
2015-02-21 15:28:24 ----D---- C:\sketchup
2015-02-19 13:10:41 ----D---- C:\Program Files\glassfish-4.1
2015-02-19 12:55:37 ----D---- C:\Program Files\NetBeans 8.0.2
2015-02-19 12:43:01 ----D---- C:\ProgramData\Sun
2015-02-19 12:42:59 ----D---- C:\Program Files\Common Files\Java
2015-02-19 12:41:19 ----A---- C:\Windows\system32\javaws.exe
2015-02-19 12:40:53 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-02-19 12:40:53 ----A---- C:\Windows\system32\javaw.exe
2015-02-19 12:40:52 ----A---- C:\Windows\system32\java.exe
2015-02-19 12:37:30 ----D---- C:\Program Files\Java
2015-02-19 09:43:33 ----D---- C:\Users\vandy\AppData\Roaming\NVIDIA
2015-02-19 08:57:17 ----D---- C:\Program Files\MAXON
2015-02-19 08:55:26 ----D---- C:\Users\vandy\AppData\Roaming\MAXON
2015-02-17 15:10:03 ----D---- C:\Windows\log.system.cgp
2015-02-17 15:08:39 ----A---- C:\Windows\UC.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\RAR.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\PKUNZIP.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\NOCLOSE.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\LHA.PIF
2015-02-17 15:08:38 ----A---- C:\Windows\ARJ.PIF
2015-02-17 15:08:37 ----D---- C:\Users\vandy\AppData\Roaming\GHISLER
2015-02-17 15:08:37 ----D---- C:\totalcmd
2015-02-16 18:47:41 ----D---- C:\Program Files\Common Files\PX Storage Engine
2015-02-16 18:47:31 ----D---- C:\Users\vandy\AppData\Roaming\Winamp
2015-02-16 18:47:31 ----D---- C:\Program Files\Winamp
2015-02-16 11:54:55 ----D---- C:\Users\vandy\AppData\Roaming\Adobe
2015-02-16 11:54:32 ----D---- C:\Users\vandy\AppData\Roaming\oald8
2015-02-16 11:53:32 ----D---- C:\Windows\system32\Macromed
2015-02-16 11:52:58 ----D---- C:\Program Files\Oxford
2015-02-16 09:49:05 ----D---- C:\ProgramData\TamoSoft
2015-02-10 17:57:13 ----D---- C:\ProgramData\AVerTV 3D
2015-02-10 17:55:43 ----D---- C:\Windows\Driver Cache
2015-02-10 17:55:43 ----A---- C:\Windows\system32\drivers\AVerAF35.sys
2015-02-10 17:53:45 ----A---- C:\Windows\system32\CardID.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib22.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib21.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib12.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\sptlib11.dll
2015-02-10 17:53:40 ----A---- C:\Windows\system32\pthreadVC.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib03.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib02.dll
2015-02-10 17:53:39 ----A---- C:\Windows\system32\sptlib01.dll
2015-02-10 17:53:27 ----D---- C:\Program Files\Common Files\AVerMedia
2015-02-10 17:53:25 ----D---- C:\Program Files\AVerMedia
2015-02-10 16:45:44 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys
2015-02-10 15:29:47 ----D---- C:\Program Files\Drakensang Online
2015-02-10 15:21:33 ----D---- C:\Users\vandy\AppData\Roaming\Unity
2015-02-10 15:14:08 ----D---- C:\ProgramData\NVIDIA
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvvsvc.exe
2015-02-10 15:13:30 ----A---- C:\Windows\system32\nvshext.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvcr.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvsvc.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvmctray.dll
2015-02-10 15:13:29 ----A---- C:\Windows\system32\nvcpl.dll
2015-02-10 15:12:46 ----A---- C:\Windows\system32\OpenCL.dll
2015-02-10 15:03:49 ----D---- C:\NVIDIA
2015-02-10 14:54:22 ----D---- C:\Program Files\Microsoft.NET
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\PresentationHost.exe
2015-02-10 14:53:25 ----A---- C:\Windows\system32\netfxperf.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\mscoree.dll
2015-02-10 14:53:25 ----A---- C:\Windows\system32\dfshim.dll
2015-02-10 14:51:34 ----D---- C:\ProgramData\boost_interprocess
2015-02-10 14:51:33 ----D---- C:\ProgramData\NVIDIA Corporation
2015-02-10 14:51:31 ----A---- C:\Windows\system32\nvaudcap32v.dll
2015-02-10 14:51:31 ----A---- C:\Windows\system32\drivers\nvvad32v.sys
2015-02-10 14:51:14 ----D---- C:\Program Files\NVIDIA Corporation
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-02-10 14:45:56 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-02-10 14:45:55 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-02-10 14:45:54 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-02-10 14:45:26 ----HD---- C:\Windows\msdownld.tmp
2015-02-10 14:45:18 ----D---- C:\Windows\system32\directx
2015-02-10 12:58:42 ----D---- C:\Program Files\GoldWave
2015-02-10 12:19:28 ----D---- C:\Program Files\Tracker Software
2015-02-10 11:46:37 ----D---- C:\Program Files\Strogino CS Portal
2015-02-10 11:28:55 ----D---- C:\Users\vandy\AppData\Roaming\WinRAR
2015-02-10 11:27:30 ----D---- C:\Program Files\ReviverSoft
2015-02-10 11:27:21 ----D---- C:\Users\vandy\AppData\Roaming\OpenCandy
2015-02-10 11:27:05 ----D---- C:\ProgramData\APN
2015-02-10 11:26:44 ----D---- C:\Users\vandy\AppData\Roaming\BitTorrent
2015-02-10 10:49:30 ----D---- C:\Users\vandy\AppData\Roaming\Skype
2015-02-10 10:49:21 ----RD---- C:\Program Files\Skype
2015-02-10 10:49:21 ----D---- C:\Program Files\Common Files\Skype
2015-02-10 10:49:17 ----D---- C:\ProgramData\Skype
2015-02-09 20:49:07 ----D---- C:\Windows\SoftwareDistribution
2015-02-09 20:46:45 ----D---- C:\Windows\Prefetch
2015-02-09 20:45:27 ----ASH---- C:\hiberfil.sys
2015-02-09 20:44:40 ----D---- C:\Windows\Panther
2015-02-09 20:33:48 ----D---- C:\UNDEL
2015-02-09 19:32:11 ----D---- C:\Users\vandy\AppData\Roaming\LibreOffice
2015-02-09 19:31:49 ----D---- C:\Program Files\WinRAR
2015-02-09 19:27:39 ----D---- C:\Program Files\LibreOffice 4
2015-02-09 18:44:24 ----D---- C:\Users\vandy\AppData\Roaming\Tomabo
2015-02-09 16:05:22 ----D---- C:\Program Files\Tomabo
2015-02-09 15:35:45 ----D---- C:\Program Files\OpenTTD
2015-02-09 14:42:48 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-02-09 14:42:47 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-02-09 14:42:46 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-02-09 14:42:45 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-02-09 14:42:44 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-02-09 14:42:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-02-09 14:42:42 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-02-09 14:42:41 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-02-09 14:42:40 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-02-09 14:42:39 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-02-09 14:42:38 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-02-09 14:42:37 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-02-09 14:42:36 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-02-09 14:42:35 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-02-09 14:42:34 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\xactengine2_9.dll
2015-02-09 14:42:33 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-02-09 14:42:32 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-02-09 14:42:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-02-09 14:42:30 ----A---- C:\Windows\system32\xinput1_3.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-02-09 14:42:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-02-09 14:42:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-02-09 14:42:27 ----A---- C:\Windows\system32\d3dx10.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\x3daudio1_1.dll
2015-02-09 14:42:26 ----A---- C:\Windows\system32\d3dx9_31.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_2.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xinput1_1.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-02-09 14:42:25 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-02-09 14:42:24 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-02-09 14:42:12 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-02-09 14:42:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-02-09 14:42:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-02-09 14:42:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-02-09 14:27:40 ----HD---- C:\Program Files\InstallShield Installation Information
2015-02-09 12:56:04 ----D---- C:\ProgramData\AVG Security Toolbar
2015-02-09 12:54:47 ----D---- C:\Program Files\AVG Web TuneUp
2015-02-09 12:46:53 ----D---- C:\Users\vandy\AppData\Roaming\AVG2015
2015-02-09 12:45:16 ----D---- C:\Users\vandy\AppData\Roaming\TuneUp Software
2015-02-09 12:43:28 ----HD---- C:\$AVG
2015-02-09 12:43:28 ----D---- C:\ProgramData\AVG2015
2015-02-09 12:42:36 ----D---- C:\Program Files\AVG
2015-02-09 12:36:12 ----SHD---- C:\Windows\Installer
2015-02-09 12:35:40 ----HD---- C:\ProgramData\Common Files
2015-02-09 12:35:40 ----D---- C:\ProgramData\MFAData
2015-02-09 12:31:55 ----D---- C:\Program Files\Google
2015-02-09 12:29:00 ----D---- C:\Program Files\MagicISO
2015-02-09 12:28:06 ----N---- C:\Windows\system32\MpSigStub.exe
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wups2.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wucltux.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuaueng.dll
2015-02-09 12:21:48 ----A---- C:\Windows\system32\wuauclt.exe
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wups.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wudriver.dll
2015-02-09 12:21:33 ----A---- C:\Windows\system32\wuapi.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuwebv.dll
2015-02-09 12:21:21 ----A---- C:\Windows\system32\wuapp.exe
2015-02-09 12:15:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-09 12:11:07 ----D---- C:\Users\vandy\AppData\Roaming\Identities
2015-02-09 12:10:41 ----SD---- C:\Users\vandy\AppData\Roaming\Microsoft
2015-02-09 12:10:41 ----D---- C:\Users\vandy\AppData\Roaming\Media Center Programs
2015-02-03 10:47:24 ----A---- C:\Windows\system32\drivers\avglogx.sys

======List of files/folders modified in the last 1 month======

2015-02-24 14:53:52 ----RD---- C:\Program Files
2015-02-24 14:47:31 ----D---- C:\Windows\Temp
2015-02-23 18:57:01 ----HD---- C:\ProgramData
2015-02-23 17:01:30 ----SHD---- C:\System Volume Information
2015-02-23 15:30:32 ----HD---- C:\Config.Msi
2015-02-22 17:43:23 ----D---- C:\Windows\System32
2015-02-22 17:35:03 ----D---- C:\Program Files\Common Files
2015-02-20 07:09:31 ----D---- C:\=== ARCHIV ===
2015-02-20 07:03:59 ----D---- C:\=== Windows 7 ===
2015-02-19 13:08:38 ----D---- C:\wamp
2015-02-19 09:12:36 ----D---- C:\Windows\system32\config
2015-02-19 09:01:59 ----D---- C:\Windows\winsxs
2015-02-18 13:13:45 ----D---- C:\Windows\system32\drivers
2015-02-17 15:10:19 ----AD---- C:\Windows
2015-02-16 22:20:27 ----D---- C:\Windows\system32\Tasks
2015-02-16 11:53:07 ----RSD---- C:\Windows\Fonts
2015-02-16 10:25:30 ----D---- C:\Windows\inf
2015-02-16 10:23:14 ----D---- C:\Windows\system32\catroot
2015-02-16 10:23:12 ----D---- C:\Windows\system32\DriverStore
2015-02-15 14:42:12 ----D---- C:\Windows\system32\NDF
2015-02-14 18:58:43 ----D---- C:\Windows\system32\drivers\etc
2015-02-14 16:34:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-02-13 17:48:38 ----SD---- C:\ProgramData\Microsoft
2015-02-13 09:16:44 ----D---- C:\Windows\system32\catroot2
2015-02-12 11:08:57 ----D---- C:\Windows\system32\wdi
2015-02-10 17:51:34 ----D---- C:\Program Files\Common Files\microsoft shared
2015-02-10 16:41:48 ----D---- C:\Windows\Microsoft.NET
2015-02-10 16:41:47 ----RSD---- C:\Windows\assembly
2015-02-10 15:14:02 ----RD---- C:\Users
2015-02-10 15:13:20 ----D---- C:\Windows\Help
2015-02-10 14:54:34 ----D---- C:\Windows\system32\en-US
2015-02-10 11:28:23 ----D---- C:\Windows\Tasks
2015-02-10 09:01:04 ----D---- C:\Windows\Logs
2015-02-09 21:07:15 ----D---- C:\Windows\debug
2015-02-09 20:55:20 ----D---- C:\Windows\system32\CodeIntegrity
2015-02-09 20:49:02 ----D---- C:\Windows\system32\sysprep
2015-02-09 20:46:39 ----D---- C:\Windows\CSC
2015-02-09 20:44:27 ----RASH---- C:\BOOTSECT.BAK
2015-02-09 20:44:25 ----SHD---- C:\Boot
2015-02-09 18:51:56 ----SHD---- C:\$Recycle.Bin
2015-02-09 17:59:00 ----D---- C:\Windows\rescache
2015-02-09 12:28:00 ----D---- C:\Windows\system32\LogFiles
2015-02-09 12:21:06 ----D---- C:\Windows\system32\restore
2015-02-09 12:15:11 ----D---- C:\Windows\system32\wbem
2015-02-09 12:09:10 ----SHD---- C:\Recovery

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-11-18 154904]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2015-02-03 265184]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2015-01-23 107488]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R0 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2005-11-14 34176]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2015-02-10 217568]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2015-01-16 210400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 AVerAF35;AVerMedia A835 USB DVB-T; C:\Windows\System32\Drivers\AVerAF35.sys [2013-06-05 769152]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad32v.sys [2014-11-22 32912]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2013-06-26 368640]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-10-31 167936]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2015-02-10 3411408]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2015-02-10 308720]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706128]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-30 662816]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-09 107848]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Roli]

Zdravím, v první řadě dotaz - trváš na antiviru AVG ?


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

Služba Google Update (gupdate)
Služba Google Update (gupdatem)
NVIDIA Update Service Daemon

dvojklikem se otevře karta kde nejprve službu zastav tlačítkem Zastavit u položky Typ spouštění vyber Zakázáno a klik na OK.


V Plánovači úloh zakaž Google Update bude to tam vícekrát.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.