kotrola Logu

[Azzy]

Prosím o kontrolu logu:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Týnka at 2015-05-07 13:00:12
Microsoft Windows 7 Professional Service Pack 1
System drive D: has 2 GB (3%) free of 65 GB
Total RAM: 1014 MB (26% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:02:24, on 7.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
D:\Windows\system32\Dwm.exe
D:\Windows\Explorer.EXE
D:\Windows\system32\taskhost.exe
D:\Windows\system32\taskeng.exe
D:\Program Files\IObit\Advanced SystemCare 6\Monitor.exe
D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
D:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
D:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
D:\Users\Týnka\AppData\Local\Google\Update\GoogleUpdate.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\DAEMON Tools Lite\DTLite.exe
D:\Windows\system32\wbem\unsecapp.exe
D:\Windows\system32\wuauclt.exe
D:\Users\Týnka\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Týnka\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Týnka\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Týnka\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Týnka\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Týnka\Desktop\RSIT.exe
D:\Program Files\trend micro\Týnka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - D:\PROGRA~1\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] D:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [CanonMyPrinter] D:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenuEx] D:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKCU\..\Run: [Google Update] "D:\Users\Týnka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "D:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "D:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - D:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - D:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Users\Týnka\Desktop\Updater\Updater.exe

--
End of file - 6392 bytes

======Scheduled tasks folder======

D:\Windows\tasks\Adobe Flash Player Updater.job - D:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
D:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3267827825-3876589084-2626482647-1000Core.job - D:\Users\Týnka\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
D:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3267827825-3876589084-2626482647-1000UA.job - D:\Users\Týnka\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-209689230-1734622552-1699461121-1000Core.job - D:\Users\Kristýnka\AppData\Local\Google\Update\GoogleUpdate.exe /c
D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-209689230-1734622552-1699461121-1000UA.job - D:\Users\Kristýnka\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3267827825-3876589084-2626482647-1000Core.job - D:\Users\Týnka\AppData\Local\Google\Update\GoogleUpdate.exe /c
D:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3267827825-3876589084-2626482647-1000UA.job - D:\Users\Týnka\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-10-16 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - D:\PROGRA~1\IObit\ADVANC~1\BROWER~1\ASCPLU~1.DLL [2013-04-24 659264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"RtHDVCpl"=D:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-07-28 9398888]
"AvastUI.exe"=D:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-10-16 4085896]
"CanonMyPrinter"=D:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2516296]
"CanonSolutionMenuEx"=D:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=D:\Users\Týnka\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-23 107912]
"SpybotSD TeaTimer"=D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-07-07 2156368]
"DAEMON Tools Lite"=D:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=D:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - D:\Windows\System32\Notepad.exe %1
.js - open - D:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-07 13:00:14 ----D---- D:\Program Files\trend micro
2015-05-07 13:00:12 ----D---- D:\rsit
2015-05-07 12:06:41 ----ASH---- D:\pagefile.sys
2015-04-23 19:47:01 ----D---- D:\ProgramData\CanonIJPLM
2015-04-23 18:46:47 ----D---- D:\Program Files\Skype
2015-04-23 18:46:36 ----D---- D:\Program Files\Common Files\Skype
2015-04-22 15:00:59 ----A---- D:\Windows\system32\gdi32.dll
2015-04-22 15:00:35 ----A---- D:\Windows\system32\appraiser.dll
2015-04-22 15:00:34 ----A---- D:\Windows\system32\generaltel.dll
2015-04-22 15:00:34 ----A---- D:\Windows\system32\acmigration.dll
2015-04-22 15:00:33 ----A---- D:\Windows\system32\aeinv.dll
2015-04-22 15:00:31 ----A---- D:\Windows\system32\invagent.dll
2015-04-22 15:00:29 ----A---- D:\Windows\system32\devinv.dll
2015-04-22 15:00:20 ----A---- D:\Windows\system32\aepdu.dll
2015-04-22 15:00:17 ----A---- D:\Windows\system32\aepic.dll
2015-04-22 14:59:34 ----A---- D:\Windows\system32\clfs.sys
2015-04-22 14:59:32 ----A---- D:\Windows\system32\clfsw32.dll
2015-04-22 14:58:30 ----A---- D:\Windows\system32\ntdll.dll
2015-04-22 14:58:27 ----A---- D:\Windows\system32\ntoskrnl.exe
2015-04-22 14:58:09 ----A---- D:\Windows\system32\ntkrnlpa.exe
2015-04-22 14:57:56 ----A---- D:\Windows\system32\lsasrv.dll
2015-04-22 14:57:55 ----A---- D:\Windows\system32\drivers\ksecpkg.sys
2015-04-22 14:57:54 ----A---- D:\Windows\system32\schannel.dll
2015-04-22 14:57:51 ----A---- D:\Windows\system32\srcore.dll
2015-04-22 14:57:48 ----A---- D:\Windows\system32\kerberos.dll
2015-04-22 14:57:44 ----A---- D:\Windows\system32\rstrui.exe
2015-04-22 14:57:42 ----A---- D:\Windows\system32\msv1_0.dll
2015-04-22 14:57:40 ----A---- D:\Windows\system32\drivers\ksecdd.sys
2015-04-22 14:57:38 ----A---- D:\Windows\system32\smss.exe
2015-04-22 14:57:38 ----A---- D:\Windows\system32\ncrypt.dll
2015-04-22 14:57:37 ----A---- D:\Windows\system32\TSpkg.dll
2015-04-22 14:57:35 ----A---- D:\Windows\system32\wdigest.dll
2015-04-22 14:57:33 ----A---- D:\Windows\system32\auditpol.exe
2015-04-22 14:57:30 ----A---- D:\Windows\system32\lsass.exe
2015-04-22 14:57:25 ----A---- D:\Windows\system32\srclient.dll
2015-04-22 14:57:25 ----A---- D:\Windows\system32\csrsrv.dll
2015-04-22 14:57:21 ----A---- D:\Windows\system32\sspicli.dll
2015-04-22 14:57:15 ----A---- D:\Windows\system32\sspisrv.dll
2015-04-22 14:57:13 ----A---- D:\Windows\system32\credssp.dll
2015-04-22 14:57:11 ----A---- D:\Windows\system32\secur32.dll
2015-04-22 14:57:11 ----A---- D:\Windows\system32\apisetschema.dll
2015-04-22 14:57:00 ----A---- D:\Windows\system32\adtschema.dll
2015-04-22 14:56:57 ----A---- D:\Windows\system32\msaudite.dll
2015-04-22 14:56:48 ----A---- D:\Windows\system32\msobjs.dll
2015-04-22 14:52:59 ----A---- D:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-22 14:52:57 ----A---- D:\Windows\system32\ieetwproxystub.dll
2015-04-22 14:52:57 ----A---- D:\Windows\system32\ieetwcollector.exe
2015-04-22 14:52:47 ----A---- D:\Windows\system32\iernonce.dll
2015-04-22 14:52:47 ----A---- D:\Windows\system32\ie4uinit.exe
2015-04-22 14:52:42 ----A---- D:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-22 14:52:38 ----A---- D:\Windows\system32\iedkcs32.dll
2015-04-22 14:52:36 ----A---- D:\Windows\system32\urlmon.dll
2015-04-22 14:52:29 ----A---- D:\Windows\system32\jsproxy.dll
2015-04-22 14:52:26 ----A---- D:\Windows\system32\ieUnatt.exe
2015-04-22 14:52:24 ----A---- D:\Windows\system32\jscript9diag.dll
2015-04-22 14:52:23 ----A---- D:\Windows\system32\dxtmsft.dll
2015-04-22 14:52:20 ----A---- D:\Windows\system32\ieapfltr.dll
2015-04-22 14:52:18 ----A---- D:\Windows\system32\msfeeds.dll
2015-04-22 14:52:07 ----A---- D:\Windows\system32\msrating.dll
2015-04-22 14:52:05 ----A---- D:\Windows\system32\iesetup.dll
2015-04-22 14:52:01 ----A---- D:\Windows\system32\ieetwcollectorres.dll
2015-04-22 14:51:56 ----A---- D:\Windows\system32\wininet.dll
2015-04-22 14:51:51 ----A---- D:\Windows\system32\dxtrans.dll
2015-04-22 14:51:48 ----A---- D:\Windows\system32\ieui.dll
2015-04-22 14:51:45 ----A---- D:\Windows\system32\ieframe.dll
2015-04-22 14:51:35 ----A---- D:\Windows\system32\mshtmled.dll
2015-04-22 14:51:28 ----A---- D:\Windows\system32\mshtmlmedia.dll
2015-04-22 14:51:25 ----A---- D:\Windows\system32\MshtmlDac.dll
2015-04-22 14:51:19 ----A---- D:\Windows\system32\iertutil.dll
2015-04-22 14:51:05 ----A---- D:\Windows\system32\mshtml.dll
2015-04-22 14:50:58 ----A---- D:\Windows\system32\vbscript.dll
2015-04-22 14:50:46 ----A---- D:\Windows\system32\jscript9.dll
2015-04-22 14:50:09 ----A---- D:\Windows\system32\wuapp.exe
2015-04-22 14:50:09 ----A---- D:\Windows\system32\wu.upgrade.ps.dll
2015-04-22 14:50:08 ----A---- D:\Windows\system32\wuauclt.exe
2015-04-22 14:50:05 ----A---- D:\Windows\system32\wucltux.dll
2015-04-22 14:50:02 ----A---- D:\Windows\system32\wups2.dll
2015-04-22 14:50:01 ----A---- D:\Windows\system32\wudriver.dll
2015-04-22 14:49:58 ----A---- D:\Windows\system32\wups.dll
2015-04-22 14:49:56 ----A---- D:\Windows\system32\wuwebv.dll
2015-04-22 14:49:52 ----A---- D:\Windows\system32\wuapi.dll
2015-04-22 14:49:50 ----A---- D:\Windows\system32\WinSetupUI.dll
2015-04-22 14:49:39 ----A---- D:\Windows\system32\wuaueng.dll
2015-04-22 13:16:59 ----A---- D:\Windows\system32\drivers\http.sys
2015-04-22 13:10:09 ----A---- D:\Windows\system32\msxml3.dll
2015-04-22 13:09:57 ----A---- D:\Windows\system32\msxml3r.dll
2015-04-21 09:56:55 ----SD---- D:\Windows\system32\GWX

======List of files/folders modified in the last 1 month======

2015-05-07 13:01:51 ----D---- D:\Windows\Temp
2015-05-07 13:00:37 ----D---- D:\Windows\Prefetch
2015-05-07 13:00:14 ----D---- D:\Program Files
2015-05-07 12:59:16 ----D---- D:\Windows\System32
2015-05-07 12:59:16 ----A---- D:\Windows\system32\PerfStringBackup.INI
2015-05-07 12:59:15 ----D---- D:\Windows\inf
2015-05-07 12:30:03 ----D---- D:\Windows\system32\config
2015-05-07 12:03:15 ----SHD---- D:\System Volume Information
2015-04-27 13:43:57 ----D---- D:\Windows
2015-04-27 13:08:53 ----D---- D:\Windows\Microsoft.NET
2015-04-27 13:04:19 ----RSD---- D:\Windows\assembly
2015-04-26 19:03:44 ----D---- D:\Windows\AppCompat
2015-04-23 19:54:16 ----D---- D:\Windows\winsxs
2015-04-23 19:52:46 ----SHD---- D:\Config.Msi
2015-04-23 19:48:24 ----SD---- D:\Windows\system32\CompatTel
2015-04-23 19:48:24 ----D---- D:\Windows\system32\appraiser
2015-04-23 19:48:23 ----D---- D:\Windows\system32\wbem
2015-04-23 19:48:23 ----D---- D:\Windows\AppPatch
2015-04-23 19:48:22 ----D---- D:\Windows\system32\cs-CZ
2015-04-23 19:48:19 ----D---- D:\Windows\system32\drivers
2015-04-23 19:48:18 ----D---- D:\Windows\system32\en-US
2015-04-23 19:48:16 ----D---- D:\Program Files\Internet Explorer
2015-04-23 19:47:01 ----HD---- D:\ProgramData
2015-04-23 19:29:32 ----SHD---- D:\Windows\Installer
2015-04-23 19:29:15 ----D---- D:\ProgramData\Microsoft Help
2015-04-23 18:48:34 ----D---- D:\ProgramData\Skype
2015-04-23 18:46:36 ----D---- D:\Program Files\Common Files
2015-04-22 13:06:45 ----D---- D:\Windows\system32\catroot2
2015-04-21 09:58:35 ----D---- D:\Windows\Logs
2015-04-19 09:41:11 ----A---- D:\Windows\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; D:\Windows\system32\drivers\aswRvrt.sys [2014-10-16 49944]
R0 aswVmm;avast! VM Monitor; D:\Windows\system32\drivers\aswVmm.sys [2014-10-16 192352]
R0 rdyboost;ReadyBoost; D:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; D:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswRdr;aswRdr; D:\Windows\system32\drivers\aswRdr2.sys [2014-10-16 81768]
R1 aswSnx;aswSnx; D:\Windows\system32\drivers\aswSnx.sys [2014-11-22 779536]
R1 aswSP;aswSP; D:\Windows\system32\drivers\aswSP.sys [2014-10-16 414520]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; D:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; D:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-07-31 218688]
R1 vwififlt;Virtual WiFi Filter Driver; D:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; D:\Windows\system32\drivers\aswHwid.sys [2014-10-16 24184]
R2 aswMonFlt;aswMonFlt; D:\Windows\system32\drivers\aswMonFlt.sys [2014-10-16 67824]
R2 aswStm;aswStm; D:\Windows\system32\drivers\aswStm.sys [2014-10-16 71944]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\Windows\system32\drivers\RTKVHDA.sys [2010-07-28 3154920]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; D:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-14 43008]
R3 SrvHsfHDA;SrvHsfHDA; D:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; D:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; D:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; D:\Windows\system32\DRIVERS\w29n51.sys [2008-01-07 2216064]
S2 Parvdm;Parvdm; D:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; D:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; D:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AR5211;Atheros Wireless Network Adapter Service; D:\Windows\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 athr;Atheros Extensible Wireless LAN device driver; D:\Windows\system32\DRIVERS\athr.sys [2010-11-13 2109440]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; D:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 NETw2v32;Ovladač bezdrátové síťové karty pro operační systém Windows Vista Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista; D:\Windows\system32\DRIVERS\NETw2v32.sys [2007-03-07 2595840]
S3 pciide;pciide; D:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; D:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; D:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; D:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; D:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; D:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; D:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; D:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; D:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; D:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; D:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService6;Advanced SystemCare Service 6; D:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe [2013-04-18 574272]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-10-16 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; D:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ICQ Service;ICQ Service; D:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; D:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 SkypeUpdate;Skype Updater; D:\Users\Týnka\Desktop\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; D:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-19 268464]
S3 AppMgmt;@appmgmts.dll,-3250; D:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; D:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; D:\Windows\system32\IEEtwCollector.exe [2015-03-13 102912]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; D:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; D:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; D:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; D:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-15 1343400]
S4 NetMsmqActivator;@D:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; D:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@D:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; D:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@D:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; D:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[Márty84]

Zdravim

Uvolnete nejake misto na disku, system se dusi.

Odinstalujte Spybota, program je zastaraly.

Odinstalujte Advanced SystemCare a pripadne vse od IObit. Dela to vic skody nez uzitku

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

[Azzy]

Zdravim, tady to je....

# AdwCleaner v4.203 - Log vytvořen 08/05/2015 v 01:42:42
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-04-30.2 [Local]
# Operační system : Windows 7 Professional Service Pack 1 (x86)
# Uživatelské jméno : Týnka - TÝNKA-PC
# Spuštěno z : D:\Users\Týnka\Desktop\adwcleaner_4.203.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : ICQ Service

***** [ Soubory / Složky ] *****

Složka Smazáno : D:\ProgramData\ICQ\ICQToolbar
Složka Smazáno : D:\Program Files\Ask.com
Složka Smazáno : D:\Program Files\ICQ6Toolbar
Složka Smazáno : D:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Složka Smazáno : D:\Users\Týnka\AppData\Local\AskToolbar
Složka Smazáno : D:\Users\Týnka\AppData\Local\iLivid
Složka Smazáno : D:\Users\Týnka\AppData\Local\PackageAware
Složka Smazáno : D:\Users\Týnka\AppData\LocalLow\AskToolbar
Složka Smazáno : D:\Users\Týnka\AppData\Roaming\Uniblue
Složka Smazáno : D:\Users\Týnka\Desktop\Updater
Složka Smazáno : D:\Users\Týnka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd

***** [ Naplánované úlohy ] *****

Úloha Smazáno : Scheduled Update for Ask Toolbar

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Klíč Smazáno : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Klíč Smazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíč Smazáno : HKCU\Software\Ask.com
Klíč Smazáno : HKCU\Software\AskToolbar
Klíč Smazáno : HKCU\Software\ICQ\ICQToolbar
Klíč Smazáno : HKCU\Software\Local AppWizard-Generated Applications
Klíč Smazáno : HKCU\Software\AppDataLow\AskToolbarInfo
Klíč Smazáno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíč Smazáno : HKLM\SOFTWARE\ICQ\ICQToolbar
Klíč Smazáno : HKLM\SOFTWARE\Uniblue
Klíč Smazáno : HKU\.DEFAULT\Software\AskToolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17728

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Google Chrome v

[D:\Users\Týnka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : nfengeggddojhakldhlpjdlddgkkjkdd

*************************

AdwCleaner[R0].txt - [5762 bytů] - [08/05/2015 01:38:20]
AdwCleaner[S0].txt - [5564 bytů] - [08/05/2015 01:42:42]

########## EOF - D:\AdwCleaner\AdwCleaner[S0].txt - [5622 bytů] ##########

[Márty84]

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

[Azzy]

tady to je...

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 9.5.2015
Čas skenování: 18:03:45
Protokol: logmba.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.08.03
Databáze rootkitů: v2015.04.21.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: TA1nka

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 432514
Uplynulý čas: 3 hod, 8 min, 4 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 5
PUP.Optional.SweetIM, C:\Windows\Installer\462207a.msi, , [fd36f49d652547efd348102cf3138b75],
PUP.Optional.SweetIM, C:\Windows\Installer\4622080.msi, , [3201a2ef682239fdea3192aa07ff55ab],
PUP.Optional.OpenCandy, D:\Program Files\ICQ7.5\upgrade\2dcd1d63cb45e6613582211c3d5f4b23, , [6cc7dfb25535b185d2b86fcd0ef88779],
PUP.Optional.OpenCandy, D:\Program Files\ICQ7.5\upgrade\53e83dd5315bfb1f928441c9b4618b68, , [1c172e63543682b4b3d73ffd41c58f71],
Trojan.Agent.W, D:\Windows\Setup\SCRIPTS\Windows7Loader.exe, , [a2915d345931231333d34e6bc63ff40c],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Márty84]

Ten system moc legalni nebude, ze?

[Azzy]

Abych rek pravdu, ani nevim. NB neni muj, prinesla mi ho znama, ze je nejakej pomalej a nijak jsem to nezjistoval.

[Márty84]

Bohuzel je tam jasne videt nelegalni aktivator.

A pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512

Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.

21.6. http://forum.viry.cz/viewtopic.php?f=12&t=123975