Samovolně vyskakující Chrome

Zpráva

Coudy · #1 Příspěvek od **Coudy** » 23 čer 2015 09:54

Dobrý den, po instalaci programu pro čtení nbu souboru (záloha nokie) se mi do notebooku dostalo několik virů avast to pochytal. Po té jsem udělal ještě test než se spustil systém, taky jich tam pár bylo a tes za běhu systému a to už bylo čisté. Každopádně po každem spuštění notebooku se mi samovolně spustí chrom a pár krát to udělá i za chodu systému. Prosím tedy o kontrolu jestli nemám ještě nějaké viry.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Coudy NT at 2015-06-23 10:43:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 31 GB (31%) free of 99 GB
Total RAM: 8106 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:43:49, on 23.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Intel\Schedule2\schedhlp.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
E:\Programs\Game Booster 3\gbtray.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe
E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe
E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe
C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Coudy NT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [DataMigrationSoftwareMonitor.exe] "C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SafeQClient] C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "E:\Programs\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [icq] C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [CCleaner Monitoring] "E:\Programs\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [PC Suite Tray] "E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: GoPro Importer.lnk = E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe
O4 - Global Startup: SRS Premium Sound.lnk = C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADU Service (Nokia Software Recovery Tool) (ADUServiceNSRT) - Unknown owner - C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Unknown owner - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel Scheduler2 Service (IntSch2Svc) - Intel - C:\Program Files (x86)\Common Files\Intel\Schedule2\schedul2.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - E:\Programs\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: RtLedService Installer (RtLedService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtLED\RtLEDService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15150 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
winlogon.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
"C:\windows\system32\nvvsvc.exe"
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs

C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\windows\system32\nvvsvc.exe -session -first
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\system32\WLANExt.exe 36256096
\??\C:\windows\system32\conhost.exe "-1505227530-878226112-1212688956497010966133394781317388250492120539368-360033007
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\windows\System32\spoolsv.exe
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
taskeng.exe {7312BE06-5A6E-456B-804D-D1FD439E9A62}
"taskhost.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Common Files\Intel\Schedule2\schedhlp.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
taskeng.exe {0995B65D-13C2-418D-B4C2-35AD2A7498D9}
"C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Windows\System32\igfxtray.exe"
C:\windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Common Files\Intel\Schedule2\schedul2.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"E:\Programs\Game Booster 3\gbtray.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe" -CU
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe" -c
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 66b47e94-fdbb-4f5a-85bd-b48c389a30d8 1
\??\C:\windows\system32\conhost.exe "2111309188-12348549171510202811857150000-1016075853-11839897002100193500-740935925
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\windows\system32\conhost.exe "1546912540-1156900256-810316989-35353641518509108558364955055633614131498242713
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
szndesktop.exe default start
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\windows\system32\conhost.exe "1095218023-2118801397-1850960531-836457280-12223241921759579467-1570439281-988089467
"C:\Program Files (x86)\SafeQ\SafeQ_cli.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
{1DB14656-FC05-4FD5-88C8-80AAD83F7DFA}
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
{27751DC0-E4C6-4D70-A8F0-E4A07485612D}
C:\windows\System32\svchost.exe -k LocalServicePeerNet
{5CF83C34-C4DF-4E75-B59C-C2DB90CCC040}
C:\windows\system32\wbem\unsecapp.exe -Embedding
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\sysWOW64\wbem\wmiprvse.exe -secured -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\windows\SYSTEM32\WISPTIS.EXE" /ManualLaunch;
E:\Programs\CCleaner\CCleaner.exe /MONITOR /uac
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\sppsvc.exe
taskeng.exe {99C22A1B-06BC-4213-B762-00C54F98041C}
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Realtek\RtLED\RtLEDService.exe"
"C:\Program Files\Realtek\RtLED\RtLED.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 6680
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Coudy NT\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198

prefs.js - "browser.startup.homepage" - "http://seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.160 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.160 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll

C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\searchplugins\
vyhledvn-vide-ve-slub-youtube.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-12-14 11697768]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-15 2480936]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2010-11-02 1933584]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2014-10-01 789920]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2014-10-01 9745312]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2014-10-01 5374880]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2014-10-01 114688]
"Intel Scheduler2 Service"=C:\Program Files (x86)\Common Files\Intel\Schedule2\schedhlp.exe [2013-03-11 404384]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-23 2754704]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2014-01-29 171992]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2014-01-29 399832]
"Persistence"=C:\windows\system32\igfxpers.exe [2014-01-29 442328]
"ShadowPlay"=C:\windows\system32\nvspcap64.dll [2015-05-23 1571696]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2014-09-08 464608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"icq"=C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe [2014-10-06 35239432]
"CCleaner Monitoring"=E:\Programs\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"PC Suite Tray"=E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]
"cz.seznam.software.autoupdate"=C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2010-12-05 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2010-12-05 224352]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2014-10-01 329056]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"DataMigrationSoftwareMonitor.exe"=C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe [2013-03-11 3209184]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"SafeQClient"=C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [2014-08-22 493056]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"QuickTime Task"=E:\Programs\QuickTime\QTTask.exe [2014-10-02 421888]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
GoPro Importer.lnk - E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe
SRS Premium Sound.lnk - C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2014-01-29 442880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux6"=wdmaud.drv
"VIDC.CFHD"=CFHD.dll
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-06-23 10:35:46 ----D---- C:\rsit
2015-06-23 10:35:46 ----D---- C:\Program Files\trend micro
2015-06-22 20:28:37 ----D---- C:\mergemodules
2015-06-22 20:00:57 ----D---- C:\Program Files (x86)\d10f6109-a2f0-4b88-9a58-f249efef5f02
2015-06-22 20:00:56 ----D---- C:\Program Files (x86)\SensePlus
2015-06-22 20:00:54 ----D---- C:\Program Files (x86)\46b68b38-1a85-4b95-a36f-2950bb7fb78d
2015-06-22 20:00:53 ----D---- C:\Program Files (x86)\iWebar
2015-06-22 20:00:02 ----D---- C:\Program Files (x86)\YouTube Accelerator
2015-06-22 19:59:38 ----D---- C:\Program Files (x86)\Seznam.cz
2015-06-22 19:59:20 ----D---- C:\Users\Coudy NT\AppData\Roaming\Seznam.cz
2015-06-22 18:38:53 ----D---- C:\ProgramData\HTC
2015-06-22 18:38:53 ----D---- C:\Program Files (x86)\Microsoft Care Suite
2015-06-21 19:19:45 ----D---- C:\ProgramData\Nokia
2015-06-21 19:19:25 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2015-06-21 19:18:45 ----D---- C:\ProgramData\NokiaInstallerCache
2015-06-21 19:18:45 ----D---- C:\Program Files (x86)\Nokia
2015-06-17 21:01:38 ----D---- C:\ProgramData\IObit
2015-06-17 20:19:17 ----D---- C:\Users\Coudy NT\AppData\Roaming\MK10
2015-06-16 23:37:03 ----ASH---- C:\pagefile.sys
2015-06-09 23:35:25 ----A---- C:\windows\SYSWOW64\wuwebv.dll
2015-06-09 23:35:25 ----A---- C:\windows\SYSWOW64\wups.dll
2015-06-09 23:35:25 ----A---- C:\windows\SYSWOW64\wudriver.dll
2015-06-09 23:35:25 ----A---- C:\windows\SYSWOW64\wuapp.exe
2015-06-09 23:35:25 ----A---- C:\windows\SYSWOW64\wuapi.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wuwebv.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wups2.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wups.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wudriver.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wucltux.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wuaueng.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wuauclt.exe
2015-06-09 23:35:25 ----A---- C:\windows\system32\wuapp.exe
2015-06-09 23:35:25 ----A---- C:\windows\system32\wuapi.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\wu.upgrade.ps.dll
2015-06-09 23:35:25 ----A---- C:\windows\system32\WinSetupUI.dll
2015-06-09 23:30:44 ----A---- C:\windows\system32\wmp.dll
2015-06-09 23:30:43 ----A---- C:\windows\SYSWOW64\wmploc.DLL
2015-06-09 23:30:43 ----A---- C:\windows\SYSWOW64\wmp.dll
2015-06-09 23:30:43 ----A---- C:\windows\SYSWOW64\spwmp.dll
2015-06-09 23:30:43 ----A---- C:\windows\SYSWOW64\dxmasf.dll
2015-06-09 23:30:43 ----A---- C:\windows\system32\spwmp.dll
2015-06-09 23:30:43 ----A---- C:\windows\system32\dxmasf.dll
2015-06-09 23:30:42 ----A---- C:\windows\system32\wmploc.DLL
2015-06-09 23:30:39 ----A---- C:\windows\system32\generaltel.dll
2015-06-09 23:30:39 ----A---- C:\windows\system32\appraiser.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\invagent.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\devinv.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\aepic.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\aepdu.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\aeinv.dll
2015-06-09 23:30:38 ----A---- C:\windows\system32\acmigration.dll
2015-06-09 23:30:35 ----A---- C:\windows\system32\diagtrack.dll
2015-06-09 23:30:34 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2015-06-09 23:30:34 ----A---- C:\windows\SYSWOW64\kerberos.dll
2015-06-09 23:30:34 ----A---- C:\windows\SYSWOW64\advapi32.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\wow64.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\ntoskrnl.exe
2015-06-09 23:30:34 ----A---- C:\windows\system32\ntdll.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\lsasrv.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\KernelBase.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\kernel32.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\kerberos.dll
2015-06-09 23:30:34 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-06-09 23:30:34 ----A---- C:\windows\system32\advapi32.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\wow32.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\wdigest.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\typeperf.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\TSpkg.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\tracerpt.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\tdh.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\sspicli.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\srclient.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\schannel.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\setup16.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\sechost.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\secur32.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\relog.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\ntdll.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\msv1_0.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\logman.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\kernel32.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\diskperf.exe
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\credssp.dll
2015-06-09 23:30:33 ----A---- C:\windows\SYSWOW64\auditpol.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\wow64win.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\wow64cpu.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\winsrv.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\wdigest.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\typeperf.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\TSpkg.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\tracerpt.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\tdh.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\sspisrv.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\sspicli.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\srcore.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\srclient.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\smss.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\schannel.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\sechost.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\secur32.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\rstrui.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\relog.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\ntvdm64.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\ncrypt.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\msv1_0.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\lsass.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\logman.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-06-09 23:30:33 ----A---- C:\windows\system32\diskperf.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\csrsrv.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\credssp.dll
2015-06-09 23:30:33 ----A---- C:\windows\system32\conhost.exe
2015-06-09 23:30:33 ----A---- C:\windows\system32\auditpol.exe
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:30:32 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\user.exe
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\msobjs.dll
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\msaudite.dll
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\instnm.exe
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2015-06-09 23:30:32 ----A---- C:\windows\SYSWOW64\adtschema.dll
2015-06-09 23:30:32 ----A---- C:\windows\system32\UtcResources.dll
2015-06-09 23:30:32 ----A---- C:\windows\system32\msobjs.dll
2015-06-09 23:30:32 ----A---- C:\windows\system32\msaudite.dll
2015-06-09 23:30:32 ----A---- C:\windows\system32\apisetschema.dll
2015-06-09 23:30:32 ----A---- C:\windows\system32\adtschema.dll
2015-06-09 23:30:27 ----A---- C:\windows\SYSWOW64\comctl32.dll
2015-06-09 23:30:27 ----A---- C:\windows\system32\comctl32.dll
2015-06-09 23:30:26 ----A---- C:\windows\system32\win32k.sys
2015-06-09 23:30:24 ----A---- C:\windows\SYSWOW64\iernonce.dll
2015-06-09 23:30:24 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\vbscript.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\urlmon.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\mshtml.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2015-06-09 23:30:23 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2015-06-09 23:30:23 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 23:30:23 ----A---- C:\windows\system32\iernonce.dll
2015-06-09 23:30:23 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-06-09 23:30:23 ----A---- C:\windows\system32\ieetwcollector.exe
2015-06-09 23:30:23 ----A---- C:\windows\system32\ie4uinit.exe
2015-06-09 23:30:22 ----A---- C:\windows\SYSWOW64\iesetup.dll
2015-06-09 23:30:22 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2015-06-09 23:30:22 ----A---- C:\windows\system32\urlmon.dll
2015-06-09 23:30:22 ----A---- C:\windows\system32\iedkcs32.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\jscript9diag.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\jscript.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\ieui.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\iertutil.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\ieframe.dll
2015-06-09 23:30:21 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2015-06-09 23:30:21 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-06-09 23:30:21 ----A---- C:\windows\system32\msfeeds.dll
2015-06-09 23:30:21 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-06-09 23:30:21 ----A---- C:\windows\system32\dxtrans.dll
2015-06-09 23:30:20 ----A---- C:\windows\system32\iesetup.dll
2015-06-09 23:30:20 ----A---- C:\windows\system32\ieapfltr.dll
2015-06-09 23:30:19 ----A---- C:\windows\SYSWOW64\wininet.dll
2015-06-09 23:30:19 ----A---- C:\windows\SYSWOW64\msrating.dll
2015-06-09 23:30:19 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2015-06-09 23:30:19 ----A---- C:\windows\SYSWOW64\jscript9.dll
2015-06-09 23:30:19 ----A---- C:\windows\system32\vbscript.dll
2015-06-09 23:30:19 ----A---- C:\windows\system32\jsproxy.dll
2015-06-09 23:30:19 ----A---- C:\windows\system32\ieUnatt.exe
2015-06-09 23:30:19 ----A---- C:\windows\system32\iertutil.dll
2015-06-09 23:30:18 ----A---- C:\windows\system32\ieui.dll
2015-06-09 23:30:18 ----A---- C:\windows\system32\ieframe.dll
2015-06-09 23:30:18 ----A---- C:\windows\system32\dxtmsft.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\wininet.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\mshtmled.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\jscript9diag.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\jscript9.dll
2015-06-09 23:30:17 ----A---- C:\windows\system32\jscript.dll
2015-06-09 23:30:16 ----A---- C:\windows\system32\msrating.dll
2015-06-09 23:30:16 ----A---- C:\windows\system32\MshtmlDac.dll
2015-06-09 23:30:16 ----A---- C:\windows\system32\mshtml.dll
2015-06-03 15:38:26 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-06-02 09:21:27 ----RD---- C:\Program Files (x86)\Skype
2015-06-02 09:12:41 ----A---- C:\windows\SYSWOW64\dwmcore.dll
2015-06-02 09:12:41 ----A---- C:\windows\SYSWOW64\dwmapi.dll
2015-06-02 09:12:41 ----A---- C:\windows\system32\dwmcore.dll
2015-06-02 09:12:41 ----A---- C:\windows\system32\dwmapi.dll
2015-06-02 09:12:36 ----A---- C:\windows\system32\drivers\stream.sys
2015-06-02 00:41:17 ----D---- C:\windows\SYSWOW64\NV
2015-06-02 00:41:17 ----D---- C:\windows\system32\NV
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvwgf2um.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvumdshim.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvopencl.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvoglv32.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvoglshim32.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\NvIFR.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\NvFBC.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvd3dum.dll
2015-06-02 00:39:46 ----A---- C:\windows\SYSWOW64\nvcuvid.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvwgf2umx.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvumdshimx.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvopencl.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvoglv64.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvoglshim64.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\NvIFR64.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\NvFBC64.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvdispgenco6435306.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvdispco6435306.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvd3dumx.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\nvcuvid.dll
2015-06-02 00:39:46 ----A---- C:\windows\system32\drivers\nvpciflt.sys
2015-06-02 00:39:46 ----A---- C:\windows\system32\drivers\nvlddmkm.sys
2015-06-02 00:39:45 ----A---- C:\windows\SYSWOW64\nvcuda.dll
2015-06-02 00:39:45 ----A---- C:\windows\SYSWOW64\nvcompiler.dll
2015-06-02 00:39:45 ----A---- C:\windows\SYSWOW64\nvapi.dll
2015-06-02 00:39:45 ----A---- C:\windows\system32\nvcuda.dll
2015-06-02 00:39:45 ----A---- C:\windows\system32\nvcompiler.dll
2015-05-30 21:20:39 ----D---- C:\ProgramData\boost_interprocess
2015-05-30 21:20:37 ----A---- C:\windows\SYSWOW64\nvaudcap32v.dll
2015-05-30 21:20:37 ----A---- C:\windows\system32\drivers\nvvad64v.sys

======List of files/folders modified in the last 1 month======

2015-06-23 10:43:19 ----A---- C:\windows\SYSWOW64\log.txt
2015-06-23 10:41:32 ----D---- C:\windows\Temp
2015-06-23 10:41:30 ----D---- C:\windows\system32\config
2015-06-23 10:41:20 ----D---- C:\ProgramData\VeriFace
2015-06-23 10:35:46 ----RD---- C:\Program Files
2015-06-23 09:06:50 ----D---- C:\windows\System32
2015-06-23 09:06:50 ----D---- C:\windows\inf
2015-06-23 09:06:50 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-06-22 22:11:11 ----D---- C:\windows\winsxs
2015-06-22 22:00:43 ----D---- C:\Program Files (x86)
2015-06-22 21:56:35 ----D---- C:\ProgramData\e5c4ef79-068a-447e-b589-daa814c96056
2015-06-22 20:43:33 ----D---- C:\windows\system32\Tasks
2015-06-22 20:40:59 ----D---- C:\windows\system32\catroot
2015-06-22 20:30:03 ----SHD---- C:\windows\Installer
2015-06-22 20:29:43 ----D---- C:\Program Files (x86)\Common Files
2015-06-22 20:29:06 ----RSD---- C:\windows\Fonts
2015-06-22 20:29:05 ----D---- C:\windows\system32\DriverStore
2015-06-22 20:29:01 ----SHD---- C:\System Volume Information
2015-06-22 20:28:52 ----D---- C:\ProgramData\Package Cache
2015-06-22 20:21:45 ----D---- C:\windows\SysWOW64
2015-06-22 20:19:14 ----HD---- C:\ProgramData
2015-06-22 20:19:12 ----HD---- C:\windows\system32\GroupPolicy
2015-06-22 20:19:12 ----D---- C:\windows\SYSWOW64\GroupPolicy
2015-06-22 20:19:11 ----D---- C:\Program Files\Common Files
2015-06-22 20:12:31 ----D---- C:\KMPlayer
2015-06-22 20:07:41 ----D---- C:\Windows
2015-06-22 20:03:01 ----AD---- C:\ProgramData\Temp
2015-06-22 18:38:53 ----SD---- C:\ProgramData\Microsoft
2015-06-21 19:32:25 ----D---- C:\Drivers
2015-06-21 19:19:28 ----DC---- C:\windows\system32\DRVSTORE
2015-06-21 19:19:28 ----D---- C:\windows\system32\drivers
2015-06-19 16:08:57 ----D---- C:\windows\debug
2015-06-17 19:28:02 ----D---- C:\windows\rescache
2015-06-17 17:24:31 ----A---- C:\IFRToolLog.txt
2015-06-11 23:57:08 ----D---- C:\Users\Coudy NT\AppData\Roaming\vlc
2015-06-11 23:23:13 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2015-06-09 23:52:40 ----SD---- C:\windows\system32\CompatTel
2015-06-09 23:52:40 ----D---- C:\windows\SYSWOW64\cs-CZ
2015-06-09 23:52:40 ----D---- C:\windows\system32\cs-CZ
2015-06-09 23:52:40 ----D---- C:\windows\system32\appraiser
2015-06-09 23:52:40 ----D---- C:\windows\AppPatch
2015-06-09 23:52:40 ----D---- C:\Program Files\Windows Media Player
2015-06-09 23:52:40 ----D---- C:\Program Files (x86)\Windows Media Player
2015-06-09 23:52:39 ----D---- C:\windows\SYSWOW64\sk-SK
2015-06-09 23:52:39 ----D---- C:\windows\SYSWOW64\en-US
2015-06-09 23:52:39 ----D---- C:\windows\system32\sk-SK
2015-06-09 23:52:39 ----D---- C:\windows\system32\en-US
2015-06-09 23:52:39 ----D---- C:\windows\PolicyDefinitions
2015-06-09 23:52:39 ----D---- C:\Program Files\Internet Explorer
2015-06-09 23:52:38 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-09 23:42:18 ----D---- C:\ProgramData\Microsoft Help
2015-06-09 23:41:20 ----D---- C:\windows\system32\MRT
2015-06-09 23:36:22 ----A---- C:\windows\system32\MRT.exe
2015-06-09 23:29:21 ----D---- C:\windows\system32\catroot2
2015-06-04 23:24:51 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-03 15:32:17 ----D---- C:\Users\Coudy NT\AppData\Roaming\Skype
2015-06-02 09:33:42 ----D---- C:\ProgramData\Skype
2015-06-02 09:33:11 ----D---- C:\Intel
2015-06-02 00:41:19 ----D---- C:\ProgramData\NVIDIA Corporation
2015-06-02 00:41:16 ----D---- C:\ProgramData\NVIDIA
2015-06-02 00:40:48 ----D---- C:\Program Files\NVIDIA Corporation
2015-05-28 09:04:11 ----A---- C:\windows\SYSWOW64\nvinit.dll
2015-05-28 09:04:11 ----A---- C:\windows\system32\nvinitx.dll
2015-05-28 09:04:11 ----A---- C:\windows\system32\nvapi64.dll
2015-05-28 06:15:30 ----A---- C:\windows\system32\nvvsvc.exe
2015-05-28 06:15:29 ----A---- C:\windows\SYSWOW64\oemdspif.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nvsvcr.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nvsvc64.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nvshext.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nvmctray.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nv3dappshextr.dll
2015-05-28 06:15:29 ----A---- C:\windows\system32\nv3dappshext.dll
2015-05-28 06:15:28 ----A---- C:\windows\system32\nvcpl.dll
2015-05-27 12:10:58 ----SD---- C:\Users\Coudy NT\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\system32\drivers\aswRvrt.sys [2015-04-23 65736]
R0 aswVmm;avast! VM Monitor; C:\windows\system32\drivers\aswVmm.sys [2015-04-23 272248]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2014-10-01 57952]
R0 fltsrv;Acronis Storage Filter Management; C:\windows\system32\DRIVERS\fltsrv.sys [2014-10-01 155272]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-09-13 437272]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2014-10-01 39008]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2015-05-28 31560]
R0 pwdrvio;pwdrvio; C:\windows\system32\pwdrvio.sys [2013-09-30 19152]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\windows\system32\DRIVERS\snapman.sys [2014-10-01 340104]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys [2015-04-23 93528]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2015-04-23 1047320]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2015-04-23 442264]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2014-10-01 13408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys [2015-04-23 29168]
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [2015-04-23 89944]
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys [2015-04-23 137288]
R2 SSPORT;SSPORT; \??\C:\windows\system32\Drivers\SSPORT.sys [2014-05-07 11576]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2014-10-01 29792]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-01-13 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-01-13 106536]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2011-01-13 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-01-13 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-01-13 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2010-12-05 31088]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2014-01-29 5363200]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-12-14 2677864]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\windows\system32\DRIVERS\Netwsw00.sys [2015-03-13 11530144]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-23 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\windows\system32\drivers\nvvad64v.sys [2015-04-03 38032]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SPUVCbv;SPUVCb Driver Service; C:\windows\System32\Drivers\usbvideo.sys [2013-07-12 185344]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-12-15 1402416]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wdkmd;Intel WiDi KMD; C:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 FTDIBUS;USB Serial Converter Driver; C:\windows\system32\drivers\ftdibus.sys [2014-01-31 94704]
S3 FTSER2K;USB Serial Port Driver; C:\windows\system32\drivers\ftser2k.sys [2014-09-10 79872]
S3 ggflt;SEMC USB Flash Driver Filter; C:\windows\system32\DRIVERS\ggflt.sys [2014-04-17 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\windows\system32\DRIVERS\ggsemc.sys [2014-04-17 27760]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdspio;pwdspio; \??\C:\windows\system32\pwdspio.sys [2013-09-30 12504]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-11-30 307304]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usb_rndisx;Adaptér USB RNDIS; C:\windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbser;USB Modem Driver; C:\windows\system32\drivers\usbser.sys [2013-08-29 33280]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 ADUServiceNSRT;ADU Service (Nokia Software Recovery Tool); C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe [2015-05-28 94832]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-23 343336]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-01-13 956192]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-11-02 1515792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-23 1152656]
R2 IntSch2Svc;Intel Scheduler2 Service; C:\Program Files (x86)\Common Files\Intel\Schedule2\schedul2.exe [2013-03-11 1127944]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-20 325656]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-23 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2015-05-28 937288]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-11-02 836880]
R2 RtLedService;RtLedService Installer; C:\Program Files\Realtek\RtLED\RtLEDService.exe [2010-09-30 311296]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-17 5436176]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-01 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-11 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe []
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-01 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-05-22 114688]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28 174368]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-06-03 148080]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-11-02 340240]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 Origin Client Service;Origin Client Service; E:\Programs\Origin\OriginClientService.exe [2015-01-28 1910128]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-06-04 837312]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2014-10-07 1255736]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 23 čer 2015 10:15

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Coudy · #3 Příspěvek od **Coudy** » 23 čer 2015 10:51

Provedeno zde je log

# AdwCleaner v4.207 - Log vytvořen 23/06/2015 v 11:49:48
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-21.2 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Coudy NT - COUDYNT-PC
# Spuštěno z : C:\Users\Coudy NT\Desktop\adwcleaner_4.207.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\Public\Documents\Goobzo
Složka Smazáno : C:\Users\Public\Documents\ShopperPro
Složka Smazáno : C:\Program Files (x86)\iWebar
Složka Smazáno : C:\Program Files (x86)\YouTube Accelerator
Složka Smazáno : C:\Program Files (x86)\neurowise
Složka Smazáno : C:\Program Files (x86)\SensePlus
Složka Smazáno : C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Soubor Smazáno : C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\user.js
Soubor Smazáno : C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
Soubor Smazáno : C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****

Úloha Smazáno : LaunchSignup

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Klíč Smazáno : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Smazáno : HKCU\Software\Goobzo
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKCU\Software\VIS
Klíč Smazáno : HKCU\Software\AppDataLow\Software\Crossrider
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\Goobzo
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\iWebar
Klíč Smazáno : HKLM\SOFTWARE\SensePlus
Klíč Smazáno : HKU\.DEFAULT\Software\Goobzo
Klíč Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : [x64] HKLM\SOFTWARE\ShopperPro

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v38.0.5 (x86 cs)

-\\ Google Chrome v43.0.2357.130

*************************

AdwCleaner[R0].txt - [3040 bytů] - [23/06/2015 11:49:05]
AdwCleaner[S0].txt - [2771 bytů] - [23/06/2015 11:49:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2829 bytů] ##########

#4 Příspěvek od **vyosek** » 23 čer 2015 11:50

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Coudy · #5 Příspěvek od **Coudy** » 23 čer 2015 20:30

Provedeno a následný log

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Coudy NT on Łt 23.06.2015 at 20:59:46,19.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Coudy NT\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

23.6.2015 21:00:49 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\46b68b38-1a85-4b95-a36f-2950bb7fb78d deleted successfully
C:\PROGRA~2\d10f6109-a2f0-4b88-9a58-f249efef5f02 deleted successfully
C:\PROGRA~3\e5c4ef79-068a-447e-b589-daa814c96056 deleted successfully
C:\Users\Coudy NT\AppData\Local\TomTom deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\COUDYN~1\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\prefs.js:
user_pref("browser.startup.homepage", "http://seznam.cz/");

Added to C:\Users\COUDYN~1\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\46b68b38-1a85-4b95-a36f-2950bb7fb78d not found
C:\PROGRA~2\d10f6109-a2f0-4b88-9a58-f249efef5f02 not found
C:\PROGRA~3\e5c4ef79-068a-447e-b589-daa814c96056 not found
C:\PROGRA~3\OneKey Recovery deleted
C:\Users\Coudy NT\.android deleted
C:\PROGRA~2\SamsungPrinterLiveUpdateInstaller deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Coudy NT\AppData\Local\TempDIR deleted
C:\Users\Coudy NT\AppData\Local\Installer deleted
C:\Users\Coudy NT\AppData\Local\CrashRpt deleted
C:\windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\Syswow64\GroupPolicy\gpt.ini deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\COUDYN~1\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [23.04.2015 22:46]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198
D937A4645EFF8CB4F123E3C899C052B2 - E:\Programs\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.6
049BD7AD3B94F24FA274ED1F7FC5871B - E:\Programs\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.6
F9DE379CE8A782530A4FA0B731F3A49B - E:\Programs\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.6
5D4279248A0E506CF007BD51EBF74CEA - E:\Programs\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.6
559E8D42BE485208F1C4BB294D6840A4 - E:\Programs\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.6
4174499E49FE276D9BDCE13364559080 - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll - Shockwave Flash
5950D438CD3DDF2DD50D9FA4E07A6C1C - C:\Users\Coudy NT\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player

==== Chromium Look ======================

Google Chrome Version: 43.0.2357.130

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[24.03.2015 22:46]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[24.03.2015 22:46]

Avast SafePrice - Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Avast Online Security - Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

==== Chromium Startpages ======================

C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Preferences
vice":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":52548}},"tpc.googlesyndication.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":29126},"supports_spdy":true},"tpc.googlesyndication.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":46255}},"translate.google.cz:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":45485},"supports_spdy":true},"translate.google.cz:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"translate.googleusercontent.com:443":{"network_stats":{"srtt":33364},"supports_spdy":true},"widget.battleforthenet.com:443":{"supports_spdy":true},"www.blogblog.com:80":{"alternative_service":[{"port":80,"probability":0.02,"protocol_str":"quic"}]},"www.blogger.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"supports_spdy":true},"www.blogger.com:80":{"alternative_service":[{"port":80,"probability":0.02,"protocol_str":"quic"}]},"www.facebook.com:443":{"supports_spdy":true},"www.gmail.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":67428},"supports_spdy":true},"www.google-analytics.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":23525},"supports_spdy":true},"www.google-analytics.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}],"network_stats":{"srtt":31347}},"www.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":21407},"supports_spdy":true},"www.google.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}],"network_stats":{"srtt":29691}},"www.google.cz:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":27987},"supports_spdy":true},"www.google.cz:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}],"network_stats":{"srtt":33674}},"www.googleadservices.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":23306},"supports_spdy":true},"www.googleadservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":29543}},"www.googleapis.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":42601},"supports_spdy":true},"www.googletagmanager.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":30574},"supports_spdy":true},"www.googletagmanager.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}],"network_stats":{"srtt":49945}},"www.googletagservices.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":28453},"supports_spdy":true},"www.googletagservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":46855}},"www.gstatic.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":33153},"supports_spdy":true},"www.gstatic.com:80":{"alternative_service":[{"port":80,"probability":0.5,"protocol_str":"quic"}]},"www.slevomat.cz:443":{"supports_spdy":true},"www.tumblr.com:443":{"supports_spdy":true},"www.youtube-nocookie.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":22233},"supports_spdy":true},"www.youtube-nocookie.com:80":{"alternative_service":[{"port":80,"probability":0.02,"protocol_str":"quic"}]},"www.youtube.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":30743},"supports_spdy":true},"www.youtube.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}],"network_stats":{"srtt":61744}},"yt3.ggpht.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":31754},"supports_spdy":true}},"supports_quic":{"address":"192.168.2.80","used_quic":true},"version":3}},"partition":{"per_host_zoom_levels":{"14695981038468906945":{"www.redtube.com":-1.577882931182386,"www.sbazar.cz":0.5227586988632231,"xchat.centrum.cz":0.5227586988632231}}},"password_bubble":{"nopes":2},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"https://[*.]www.youtube.com:443,*":{"setting":1}},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"https://[*.]www.youtube.com:443,*":{"fullscreen":1}},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"PrvnĂ uĹľivatel","per_host_zoom_levels":{}},"protection":{"macs":{}},"safebrowsing":{"extended_reporting_enabled":true},"savefile":{"default_directory":"C:\\Users\\Coudy NT\\Downloads","type":1},"selectfile":{"last_directory":"C:\\Users\\Coudy NT\\Downloads"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13057653140340388"},"sync_promo":{"show_on_first_run_allowed":false},"translate_accepted_count":{"en":0},"translate_blocked_languages":["cs"],"translate_denied_count":{"en":5},"translate_last_denied_time":1415956523633.909,"translate_too_often_denied":true,"translate_whitelists":{}}
C29FF587D2DD824FE77C56251E9ED8A0367F98"},"default_search_provider":{"keyword":"26F1FF0265BC0E61072E1015B91DC5311CFA4C6ABFE9AF3212F0F9262D5ECEB6","name":"6C357BBB5678FC349FFA6FF6FC0628EE030811FB3B0BC8946B0E2D3FF0FD71D8","search_url":"01E7FB1CF21595C79812875AA8B4A50F8E274632B6D0BF15C9A496A60370B158"},"default_search_provider_data":{"template_url_data":"4807D54B57CA8060CE65C98678CF31E77E4D1A4B5C613684652FE264EFF8FF9F"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":"0824DE055DE4BA50EB3E11675334D687F9E26A06CFC77827CBD2D31B149601C3","bepbmhgboaologfdajaanbcjmnhjmhfn":"B4E9EFE96DA5C7C805249BC1804C53F6A66A4F52D597C3206D37B545400FA018","eemcgdkfndhakfknompkggombfjjjeno":"427955871E49F14EDD80B294B2ED17E7403FA5244E618A1603A419EE9F4173D1","ennkphjdgehloodpbhlhldgbnhmacadg":"500289C178916A550B0C0117AC5ABE981DD60B5340C91026A4E5A9005595A036","eofcbnmajmjmplflapaojjnihcjkigck":"3265FEEFD0069C6DB705F300D442C9C6F80CE309E7649FB49411234F2BA185F9","gfdkimpbcpahaombhbimeihdjnejgicl":"2F5ACFC16B3A6873BDBFA5D8A2F4D1F31C74E08A60FB04D9F1AB182F16DA8048","gomekmidlodglbbmalcneegieacbdmki":"B366B9CA86250E94AFE06CB1332C86668DF4701F6CB960ED0E4E1E3B8453C27A","kmendfapggjehodndflmmgagdbamhnfd":"C67F0227F9DF9AD2BC129B717779CB4B332317D7C1D1DD8F42FCC3FCF43F4C16","mfehgcgbbipciphmccgaenjidiccnmng":"83AAE981A1F48A3D2890E9FD9493C1AD3F0D2C43B524E231E2174FCE023F3DEA","mgndgikekgjfcpckkfioiadnlibdjbkf":"68143760C7A4258A19F138CBE500192174998C6AA73463F85C65AD633B92DC5C","mhjfbmdgcfjbbpaeojofohoefgiehjai":"9A1237C95DFA036147ADA6A58F86CEB2ACF59DE86D94086B5419F4A9CAFA428B","neajdppkdcdipfabeoofebfddakdcjhd":"87D99CAF86604D61F3447B7EE25DD062AEA093D4B71F7502E0651ACEC97D09F5","nkeimhogjdpnpccoofpliimaahmaaome":"EBCD9675B62C92104D0B728D99E1CD2C098B1AE4F8181338B3D07AC6D4CC34D0","nmmhkkegccagdldgiimedpiccmgmieda":"DF0D1EA27B9269C446279B5D4AD007EE300EDA668F65A1345BC8970F52E4F128","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"7C6C4F2BCB1CC7521B6001AC2A9FA520B4DF8E916BAA6C90F10E8DFDDB1562F8"}},"google":{"services":{"last_username":"65D764E2494A8666C542137DF25533E92C7AEBB99D64D0124A65DD5DA8B44EE7","username":"ABAA902AEAF708C22528210496152B02B71E139C69DA6C78087575037BED92E5"}},"homepage":"1E8B0F204A2969546CE0C2753AD7B2E77E3065A0280BD5CDFA53351E7A1FC45C","homepage_is_newtabpage":"EAAA7C7B7CDB2FD132250BE2EF63C91837B99D8FB4628621B08C3C039F7CECA2","pinned_tabs":"1F792A853E49D089580F65DF700B72474BE415A923ED38235DE47A6852F80A7D","prefs":{"preference_reset_time":"0EE06CF2CF7F7EF9FEB961348DF953782A5068527838A0D41ACC20901AE42031"},"profile":{"reset_prompt_memento":"907D313993EEBACDE5EE3FC627B3F01C0A8F57DACA0A88615EA34027FD511C6D"},"safebrowsing":{"incidents_sent":"7D56367AB3EEDEF20DEB3BCE06736DE2108783DF6BA972087639882A1EDC9F51"},"search_provider_overrides":"5DBF9C623BA3A2BB94F62D017FA3173DCD8B478486C34726FE7981663228C360","session":{"restore_on_startup":"C114783AED034C4049431F495CD6CEBA590DFEB17B7A234017120EB9604E38C9","startup_urls":"7C345A0D968F37AA6B80C4887879A78BC58EFAA286A088492DF8EE08BDEE749C"},"software_reporter":{"prompt_reason":"653CBD13BCB9170056FF273D24C098D8DB02E5DA6FF5BEEACE8BC56EF4CA6454","prompt_seed":"21C6F0224A15DB131D38C3ECC73A9151390603F84E9C4F00B53146E4454BA7E5","prompt_version":"19D0F7451B293B2986DB3FE5576CE36FCA3D0BFC3630F00BA9B64CC7B245A386"},"sync":{"remaining_rollback_tries":"A7BB24A77EEBCD19EC24B4DA86267F0953477F74E5D2521F1127A7EFFF8ACE0A"}},"super_mac":"EF8121E5F2EB7056FC5B328D3AFE2708D1EAA41318773DB35A1D72CD836D6A3C"},"session":{"restore_on_startup":4,"startup_urls":["http://www.google.com/"]},"sync":{"remaining_rollback_tries":0}}

==== Chromium Fix ======================

C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://lenovo.msn.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://lenovo.msn.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Coudy NT\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Coudy NT\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\13KZUURM will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Coudy NT\AppData\Local\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache is not empty, a reboot is needed

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=127 folders=67 88004778 bytes)

==== Empty Temp Folders ======================

C:\Users\Coudy NT\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\COUDYN~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Coudy NT\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\13KZUURM" not found
"C:\Users\Coudy NT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4RJ3VLQ4\bbcdn-bbnaut.ibillboard.com" not found
"C:\Users\Coudy NT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4RJ3VLQ4\cdn.behavioralengine.com" not found
"C:\Users\Coudy NT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4RJ3VLQ4\img.csfd.cz" not found
"C:\Users\Coudy NT\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4RJ3VLQ4\sv.ktrmr.com" not found

==== EOF on Łt 23.06.2015 at 21:26:55,67 ======================

#6 Příspěvek od **vyosek** » 23 čer 2015 20:31

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Coudy · #7 Příspěvek od **Coudy** » 23 čer 2015 21:53

Zde log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-06-2015 01
Ran by Coudy NT (administrator) on COUDYNT-PC on 23-06-2015 22:50:07
Running from C:\Users\Coudy NT\Desktop
Loaded Profiles: Coudy NT (Available Profiles: Coudy NT)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel) C:\Program Files (x86)\Common Files\Intel\Schedule2\schedul2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel) C:\Program Files (x86)\Common Files\Intel\Schedule2\schedhlp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(IObit) E:\Programs\Game Booster 3\gbtray.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(ICQ) C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe
(Nokia) E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(GoPro) E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe
() C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel) C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe
(VŠB-TU Ostrava) C:\Program Files (x86)\SafeQ\SafeQ_cli.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Piriform Ltd) E:\Programs\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtLED\RtLEDService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtLED\RtLED.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11697768 2010-12-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-15] (Synaptics Incorporated)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789920 2014-10-01] (Lenovo)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9745312 2014-10-01] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5374880 2014-10-01] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2014-10-01] (Lenovo)
HKLM\...\Run: [Intel Scheduler2 Service] => C:\Program Files (x86)\Common Files\Intel\Schedule2\schedhlp.exe [404384 2013-03-11] (Intel)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] ()
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-05] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-05] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2014-10-01] (Lenovo)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [DataMigrationSoftwareMonitor.exe] => C:\Program Files (x86)\Intel\DataMigrationSoftware\DataMigrationSoftwareMonitor.exe [3209184 2013-03-11] (Intel)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SafeQClient] => C:\Program Files (x86)\SafeQ\SafeQ_cli.exe [493056 2014-08-22] (VŠB-TU Ostrava)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => E:\Programs\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [icq] => C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-06] (ICQ)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [CCleaner Monitoring] => E:\Programs\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [PC Suite Tray] => E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2014-10-06] (Microsoft Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [175880 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-10-01]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-03-15]
ShortcutTarget: GoPro Importer.lnk -> E:\Programs\GoPro\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2014-10-01]
ShortcutTarget: SRS Premium Sound.lnk -> C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe (SRS Labs, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-23] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll [2014-10-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1927085407-3728873114-3248943884-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24] (Avast Software s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-06-11] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-11] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1927085407-3728873114-3248943884-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Coudy NT\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Coudy NT\AppData\Roaming\Mozilla\Firefox\Profiles\r08ddq30.default-1416252305198\searchplugins\vyhledvn-vide-ve-slub-youtube.xml [2015-04-17]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-01]

Chrome:
=======
CHR Profile: C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-23]
CHR Extension: (Google Docs) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-23]
CHR Extension: (Google Drive) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-23]
CHR Extension: (YouTube) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-23]
CHR Extension: (Google Search) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-23]
CHR Extension: (Avast SafePrice) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-01-26]
CHR Extension: (Google Sheets) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-23]
CHR Extension: (Avast Online Security) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-26]
CHR Extension: (Google Wallet) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-13]
CHR Extension: (Gmail) - C:\Users\Coudy NT\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-24]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ADUServiceNSRT; C:\Program Files (x86)\Common Files\Microsoft\Care Suite\ADUService\ADUService.exe [94832 2015-05-28] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-23] (Avast Software s.r.o.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-01-13] (Broadcom Corporation.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IntSch2Svc; C:\Program Files (x86)\Common Files\Intel\Schedule2\schedul2.exe [1127944 2013-03-11] (Intel)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; E:\Programs\Origin\OriginClientService.exe [1910128 2015-01-28] (Electronic Arts)
R2 RtLedService; C:\Program Files\Realtek\RtLED\RtLEDService.exe [311296 2010-09-30] (Realtek Semiconductor Corp.) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-17] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-23] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-23] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-23] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-23] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-23] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-23] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-23] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 SPUVCbv; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation)
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerServic; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 SoftwareService; No ImagePath
U2 Stereo Service; No ImagePath
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 22:50 - 2015-06-23 22:50 - 00021060 _____ C:\Users\Coudy NT\Desktop\FRST.txt
2015-06-23 22:49 - 2015-06-23 22:50 - 00000000 ____D C:\FRST
2015-06-23 22:48 - 2015-06-23 22:48 - 02109952 _____ (Farbar) C:\Users\Coudy NT\Desktop\FRST64.exe
2015-06-23 21:26 - 2015-06-23 20:59 - 00024064 _____ C:\windows\zoek-delete.exe
2015-06-23 21:00 - 2015-06-23 21:26 - 00019808 _____ C:\zoek-results.log
2015-06-23 20:59 - 2015-06-23 21:23 - 00000000 ____D C:\zoek_backup
2015-06-23 20:58 - 2015-06-23 20:58 - 01308672 _____ C:\Users\Coudy NT\Desktop\zoek.exe
2015-06-23 11:49 - 2015-06-23 11:49 - 00000000 ____D C:\AdwCleaner
2015-06-23 11:48 - 2015-06-23 11:48 - 02244096 _____ C:\Users\Coudy NT\Desktop\adwcleaner_4.207.exe
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\rsit
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\Program Files\trend micro
2015-06-23 10:35 - 2015-06-23 10:35 - 01222144 _____ C:\Users\Coudy NT\Desktop\RSITx64.exe
2015-06-22 20:28 - 2015-06-22 20:28 - 00000000 ____D C:\mergemodules
2015-06-22 20:21 - 2015-06-22 20:21 - 00000000 ____D C:\Users\Coudy NT\AppData\Local\NokiaAccount
2015-06-22 19:59 - 2015-06-23 21:31 - 00000000 ____D C:\Users\Coudy NT\AppData\Roaming\Seznam.cz
2015-06-22 19:59 - 2015-06-22 19:59 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-06-22 18:38 - 2015-06-22 20:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Care Suite
2015-06-22 18:38 - 2015-06-22 18:38 - 00000000 ____D C:\ProgramData\HTC
2015-06-22 18:33 - 2015-06-22 18:33 - 00001734 _____ C:\Users\Public\Desktop\Nokia PC Suite.lnk
2015-06-22 18:33 - 2015-06-22 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite
2015-06-21 21:31 - 2015-06-21 21:31 - 00000118 _____ C:\Users\Coudy NT\Desktop\backup.dat
2015-06-21 19:49 - 2015-06-21 19:49 - 00000000 ____D C:\Users\Coudy NT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2015-06-21 19:42 - 2015-06-21 19:42 - 00003198 _____ C:\windows\System32\Tasks\{AA6500BB-CC48-41FD-8713-D9E29625E496}
2015-06-21 19:20 - 2015-06-21 19:20 - 00000000 ____D C:\Users\Coudy NT\AppData\Local\Nokia
2015-06-21 19:19 - 2015-06-22 20:30 - 00000000 ____D C:\ProgramData\Nokia
2015-06-21 19:19 - 2015-06-22 20:29 - 00100574 _____ C:\windows\DPINST.LOG
2015-06-21 19:19 - 2015-06-21 19:19 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution
2015-06-21 19:18 - 2015-06-22 20:21 - 00000000 ____D C:\Program Files (x86)\Nokia
2015-06-21 19:18 - 2015-06-21 19:18 - 00000000 ____D C:\ProgramData\NokiaInstallerCache
2015-06-19 16:12 - 2015-06-23 21:46 - 00008144 _____ C:\windows\setupact.log
2015-06-19 16:12 - 2015-06-23 21:26 - 00006478 _____ C:\windows\PFRO.log
2015-06-19 16:12 - 2015-06-19 16:12 - 00000000 _____ C:\windows\setuperr.log
2015-06-17 21:03 - 2015-06-17 21:03 - 00000000 ____D C:\Users\Coudy NT\AppData\Local\Microsoft Games
2015-06-17 21:01 - 2015-06-19 17:14 - 00003046 _____ C:\windows\System32\Tasks\Game_Booster_Startup
2015-06-17 21:01 - 2015-06-17 21:01 - 00000708 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2015-06-17 21:01 - 2015-06-17 21:01 - 00000696 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2015-06-17 21:01 - 2015-06-17 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Booster 3
2015-06-17 21:01 - 2015-06-17 21:01 - 00000000 ____D C:\ProgramData\IObit
2015-06-17 20:19 - 2015-06-17 20:25 - 00000000 ____D C:\Users\Coudy NT\AppData\Roaming\MK10
2015-06-09 23:35 - 2015-05-09 05:27 - 03147776 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 02589184 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-06-09 23:35 - 2015-05-09 05:27 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-06-09 23:35 - 2015-05-09 05:26 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-06-09 23:35 - 2015-05-09 05:26 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-06-09 23:35 - 2015-05-09 05:26 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-06-09 23:35 - 2015-05-09 05:26 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-06-09 23:35 - 2015-05-09 05:14 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-06-09 23:35 - 2015-05-09 05:14 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-06-09 23:35 - 2015-05-09 05:14 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-06-09 23:35 - 2015-05-09 05:14 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-06-09 23:35 - 2015-05-09 05:13 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-06-09 23:31 - 2015-06-09 23:32 - 00007597 _____ C:\Users\Coudy NT\AppData\Local\Resmon.ResmonCfg
2015-06-09 23:30 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-06-09 23:30 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-06-09 23:30 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-06-09 23:30 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-06-09 23:30 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-06-09 23:30 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-06-09 23:30 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-06-09 23:30 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-06-09 23:30 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-06-09 23:30 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-06-09 23:30 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\windows\system32\tracerpt.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\logman.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\typeperf.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-06-09 23:30 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\relog.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-06-09 23:30 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-06-09 23:30 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\windows\system32\diskperf.exe
2015-06-09 23:30 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-06-09 23:30 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-06-09 23:30 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-06-09 23:30 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\windows\SysWOW64\sechost.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-06-09 23:30 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-06-09 23:30 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\windows\SysWOW64\tracerpt.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\windows\SysWOW64\logman.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\typeperf.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\windows\SysWOW64\relog.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-06-09 23:30 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\diskperf.exe
2015-06-09 23:30 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-06-09 23:30 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-06-09 23:30 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-06-09 23:30 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-06-09 23:30 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-06-09 23:30 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-06-09 23:30 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-06-09 23:30 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-06-09 23:30 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-06-09 23:30 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 23:30 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 23:30 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-06-09 23:30 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-06-09 23:30 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-06-09 23:30 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-06-09 23:30 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-06-09 23:30 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-06-09 23:30 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-06-09 23:30 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-06-09 23:30 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-06-09 23:30 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-06-09 23:30 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-06-09 23:30 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-06-09 23:30 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-06-09 23:30 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-06-09 23:30 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 23:30 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-06-09 23:30 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-06-09 23:30 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-06-09 23:30 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-06-09 23:30 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-06-09 23:30 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-06-09 23:30 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-06-09 23:30 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-06-09 23:30 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-06-09 23:30 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-06-09 23:30 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-06-09 23:30 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-06-09 23:30 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-06-09 23:30 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-06-09 23:30 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-06-09 23:30 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-06-09 23:30 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-06-09 23:30 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-06-09 23:30 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-06-09 23:30 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-06-09 23:30 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-06-09 23:30 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-06-09 23:30 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-06-09 23:30 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-06-09 23:30 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-06-09 23:30 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-06-09 23:30 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-06-09 23:30 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-06-09 23:30 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-06-09 23:30 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 23:30 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-06-09 23:30 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-06-09 23:30 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-06-09 23:30 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-06-09 23:30 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-06-09 23:30 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-06-09 23:30 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-06-09 23:30 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-06-09 23:30 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-06-09 23:30 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-06-09 23:30 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-06-09 23:30 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-06-09 23:30 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-06-09 23:30 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-06-09 23:30 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2015-06-09 23:30 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll
2015-06-09 23:30 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx
2015-06-09 23:30 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll
2015-06-09 23:30 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2015-06-09 23:30 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2015-06-09 23:30 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\spwmp.dll
2015-06-09 23:30 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdxm.ocx
2015-06-09 23:30 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxmasf.dll
2015-06-09 23:30 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2015-06-09 23:30 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2015-06-09 23:30 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2015-06-05 10:35 - 2015-05-30 10:12 - 00005021 _____ C:\Users\Coudy NT\Desktop\readme.txt
2015-06-05 10:35 - 2015-05-30 10:08 - 00000000 ____D C:\Users\Coudy NT\Desktop\Sygic
2015-06-05 10:35 - 2015-05-30 10:08 - 00000000 ____D C:\Users\Coudy NT\Desktop\LoquendoTTS
2015-06-05 10:35 - 2015-05-30 09:44 - 22311680 _____ C:\Users\Coudy NT\Desktop\Syg1525crk.apk
2015-06-03 15:38 - 2015-06-04 23:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-02 09:21 - 2015-06-02 09:21 - 00002731 _____ C:\Users\Public\Desktop\Skype.lnk
2015-06-02 09:21 - 2015-06-02 09:21 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-06-02 09:21 - 2015-06-02 09:21 - 00000000 ____D C:\Users\Coudy NT\Tracing
2015-06-02 09:21 - 2015-06-02 09:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-06-02 09:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\stream.sys
2015-06-02 09:12 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-06-02 09:12 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-06-02 09:12 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-06-02 09:12 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-06-02 00:41 - 2015-06-02 00:41 - 00000000 ____D C:\windows\SysWOW64\NV
2015-06-02 00:41 - 2015-06-02 00:41 - 00000000 ____D C:\windows\system32\NV
2015-06-02 00:39 - 2015-05-28 09:04 - 42719888 _____ C:\windows\system32\nvcompiler.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 37741712 _____ C:\windows\SysWOW64\nvcompiler.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 30480528 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 22946960 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 17486856 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 16185352 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 15864064 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 14987528 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 14495448 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 13304280 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 12852152 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 11830512 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 10995528 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys
2015-06-02 00:39 - 2015-05-28 09:04 - 02986392 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 02932368 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 02599056 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 01898312 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6435306.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 01557832 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6435306.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 01099808 _____ (NVIDIA Corporation) C:\windows\system32\nvumdshimx.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 01059984 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 01050440 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00982856 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00974480 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00939080 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00150648 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00128512 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll
2015-06-02 00:39 - 2015-05-28 09:04 - 00031560 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvpciflt.sys
2015-06-01 12:00 - 2015-06-01 12:00 - 00000000 ____D C:\Users\Coudy NT\AppData\Local\GWX
2015-05-30 21:20 - 2015-06-02 00:39 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-05-30 21:20 - 2015-04-03 15:21 - 00048784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll
2015-05-30 21:20 - 2015-04-03 15:21 - 00038032 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 22:29 - 2014-10-01 22:45 - 00000952 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-23 22:28 - 2014-10-02 06:39 - 00669116 _____ C:\windows\system32\perfh005.dat
2015-06-23 22:28 - 2014-10-02 06:39 - 00141744 _____ C:\windows\system32\perfc005.dat
2015-06-23 22:28 - 2009-07-14 07:13 - 01584554 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-23 22:25 - 2014-10-01 23:30 - 01112129 _____ C:\FaceProv.log
2015-06-23 22:25 - 2014-10-01 23:30 - 00000000 ____D C:\ProgramData\VeriFace
2015-06-23 21:52 - 2014-10-02 14:32 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-06-23 21:46 - 2014-10-01 23:00 - 02068276 _____ C:\windows\WindowsUpdate.log
2015-06-23 21:41 - 2009-07-14 06:45 - 00022464 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-23 21:41 - 2009-07-14 06:45 - 00022464 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-23 21:27 - 2014-10-01 23:25 - 00845447 _____ C:\windows\system32\fastboot.set
2015-06-23 21:27 - 2014-10-01 22:45 - 00000948 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-23 21:26 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-23 21:21 - 2014-10-01 21:47 - 00000000 ____D C:\Users\Coudy NT
2015-06-23 21:21 - 2009-07-14 05:20 - 00000000 ___HD C:\windows\system32\GroupPolicy
2015-06-23 21:21 - 2009-07-14 05:20 - 00000000 ____D C:\windows\SysWOW64\GroupPolicy
2015-06-22 22:00 - 2014-10-01 21:47 - 00112632 _____ C:\Users\Coudy NT\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-22 22:00 - 2009-07-14 06:45 - 00420344 _____ C:\windows\system32\FNTCACHE.DAT
2015-06-22 20:12 - 2015-05-11 20:49 - 00000000 ____D C:\KMPlayer
2015-06-22 20:03 - 2014-10-01 23:23 - 00000000 ____D C:\ProgramData\Temp
2015-06-22 19:47 - 2014-10-01 22:46 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-17 19:28 - 2015-04-16 19:57 - 00000000 ____D C:\windows\rescache
2015-06-11 23:57 - 2014-10-03 00:31 - 00000000 ____D C:\Users\Coudy NT\AppData\Roaming\vlc
2015-06-11 23:23 - 2014-10-02 14:32 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-06-11 23:23 - 2014-10-02 14:32 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 23:23 - 2014-10-02 14:32 - 00003852 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-06-11 23:22 - 2014-10-02 14:32 - 00000000 ____D C:\Users\Coudy NT\AppData\Local\Adobe
2015-06-09 23:53 - 2009-07-14 07:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2015-06-09 23:52 - 2014-12-11 10:06 - 00000000 ____D C:\windows\system32\appraiser
2015-06-09 23:52 - 2014-10-02 14:33 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-09 23:52 - 2009-07-14 05:20 - 00000000 ____D C:\windows\SysWOW64\sk-SK
2015-06-09 23:52 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\sk-SK
2015-06-09 23:52 - 2009-07-14 05:20 - 00000000 ____D C:\windows\PolicyDefinitions
2015-06-09 23:42 - 2014-11-17 14:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-09 23:41 - 2014-10-02 14:32 - 00000000 ____D C:\windows\system32\MRT
2015-06-09 23:36 - 2014-10-02 14:32 - 140135120 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-06-09 23:30 - 2009-07-14 07:08 - 00032542 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-06-04 23:24 - 2014-10-01 22:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-03 15:32 - 2014-12-10 20:36 - 00000000 ____D C:\Users\Coudy NT\AppData\Roaming\Skype
2015-06-02 22:53 - 2014-10-01 22:46 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-06-02 09:33 - 2014-12-10 20:36 - 00000000 ____D C:\ProgramData\Skype
2015-06-02 09:33 - 2014-10-01 23:00 - 00000000 ____D C:\Intel
2015-06-02 00:41 - 2014-10-01 22:25 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-02 00:41 - 2014-10-01 22:25 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-02 00:40 - 2014-10-01 22:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-05-28 09:04 - 2014-10-01 22:25 - 03379680 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll
2015-05-28 09:04 - 2014-10-01 22:25 - 00175880 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll
2015-05-28 09:04 - 2014-10-01 22:25 - 00154256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll
2015-05-28 09:04 - 2014-10-01 22:25 - 00030966 _____ C:\windows\system32\nvinfo.pb
2015-05-28 06:15 - 2014-10-01 22:25 - 06872904 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 03491984 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 02558608 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 01059472 _____ (NVIDIA Corporation) C:\windows\system32\nv3dappshext.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 00937288 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
2015-05-28 06:15 - 2014-10-01 22:25 - 00579400 _____ (NVIDIA Corporation) C:\windows\SysWOW64\oemdspif.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 00385168 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 00075080 _____ (NVIDIA Corporation) C:\windows\system32\nv3dappshextr.dll
2015-05-28 06:15 - 2014-10-01 22:25 - 00062608 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll
2015-05-27 12:48 - 2014-10-01 22:25 - 04408727 _____ C:\windows\system32\nvcoproc.bin

==================== Files in the root of some directories =======

2015-06-09 23:31 - 2015-06-09 23:32 - 0007597 _____ () C:\Users\Coudy NT\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-06-23 22:15

==================== End of log ============================

#8 Příspěvek od **vyosek** » 24 čer 2015 12:06

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [QuickTime Task] => E:\Programs\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [icq] => C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-06] (ICQ)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [CCleaner Monitoring] => E:\Programs\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [PC Suite Tray] => E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2014-10-06] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-03-15]

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerServic; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 SoftwareService; No ImagePath
U2 Stereo Service; No ImagePath
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

2015-06-23 22:50 - 2015-06-23 22:50 - 00021060 _____ C:\Users\Coudy NT\Desktop\FRST.txt
2015-06-23 21:26 - 2015-06-23 20:59 - 00024064 _____ C:\windows\zoek-delete.exe
2015-06-23 21:00 - 2015-06-23 21:26 - 00019808 _____ C:\zoek-results.log
2015-06-23 20:59 - 2015-06-23 21:23 - 00000000 ____D C:\zoek_backup
2015-06-23 20:58 - 2015-06-23 20:58 - 01308672 _____ C:\Users\Coudy NT\Desktop\zoek.exe
2015-06-23 11:49 - 2015-06-23 11:49 - 00000000 ____D C:\AdwCleaner
2015-06-23 11:48 - 2015-06-23 11:48 - 02244096 _____ C:\Users\Coudy NT\Desktop\adwcleaner_4.207.exe
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\rsit
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\Program Files\trend micro
2015-06-23 10:35 - 2015-06-23 10:35 - 01222144 _____ C:\Users\Coudy NT\Desktop\RSITx64.exe

AlternateDataStreams: C:\ProgramData\Temp:054203E4
AlternateDataStreams: C:\ProgramData\Temp:56E2E879

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Coudy · #9 Příspěvek od **Coudy** » 24 čer 2015 20:23

Zde fixlog

Fix result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
Ran by Coudy NT at 2015-06-24 21:20:01 Run:1
Running from C:\Users\Coudy NT\Desktop
Loaded Profiles: Coudy NT (Available Profiles: Coudy NT)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [QuickTime Task] => E:\Programs\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [icq] => C:\Users\Coudy NT\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-06] (ICQ)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [CCleaner Monitoring] => E:\Programs\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [PC Suite Tray] => E:\Programs\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia)
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Coudy NT\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [301568 2014-10-06] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-03-15]

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerServic; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 SoftwareService; No ImagePath
U2 Stereo Service; No ImagePath
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

2015-06-23 22:50 - 2015-06-23 22:50 - 00021060 _____ C:\Users\Coudy NT\Desktop\FRST.txt
2015-06-23 21:26 - 2015-06-23 20:59 - 00024064 _____ C:\windows\zoek-delete.exe
2015-06-23 21:00 - 2015-06-23 21:26 - 00019808 _____ C:\zoek-results.log
2015-06-23 20:59 - 2015-06-23 21:23 - 00000000 ____D C:\zoek_backup
2015-06-23 20:58 - 2015-06-23 20:58 - 01308672 _____ C:\Users\Coudy NT\Desktop\zoek.exe
2015-06-23 11:49 - 2015-06-23 11:49 - 00000000 ____D C:\AdwCleaner
2015-06-23 11:48 - 2015-06-23 11:48 - 02244096 _____ C:\Users\Coudy NT\Desktop\adwcleaner_4.207.exe
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\rsit
2015-06-23 10:35 - 2015-06-23 10:43 - 00000000 ____D C:\Program Files\trend micro
2015-06-23 10:35 - 2015-06-23 10:35 - 01222144 _____ C:\Users\Coudy NT\Desktop\RSITx64.exe

AlternateDataStreams: C:\ProgramData\Temp:054203E4
AlternateDataStreams: C:\ProgramData\Temp:56E2E879

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value removed successfully
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Windows\CurrentVersion\Run\\icq => value removed successfully
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PC Suite Tray => value removed successfully
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value removed successfully
HKU\S-1-5-21-1927085407-3728873114-3248943884-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value removed successfully
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SPReview => value removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk => moved successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
CLKMSVC10_3A60B698 => Service removed successfully
CLKMSVC10_C3B3B687 => Service removed successfully
DriverService => Service removed successfully
IAStorDataMgrSvc => Service removed successfully
idealife Update Service => Service removed successfully
IGRS => Service removed successfully
IviRegMgr => Service removed successfully
Oasis2Service => Service removed successfully
PCCarerServic => Service removed successfully
ReadyComm.DirectRouter => Service removed successfully
RichVideo => Service removed successfully
SoftwareService => Service removed successfully
Stereo Service => Service removed successfully
VBoxAswDrv => Service could not remove
C:\Users\Coudy NT\Desktop\FRST.txt => moved successfully.
C:\windows\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\Users\Coudy NT\Desktop\zoek.exe => moved successfully.
C:\AdwCleaner => moved successfully.
C:\Users\Coudy NT\Desktop\adwcleaner_4.207.exe => moved successfully.
C:\rsit => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\Users\Coudy NT\Desktop\RSITx64.exe => moved successfully.
C:\ProgramData\Temp => ":054203E4" ADS removed successfully.
C:\ProgramData\Temp => ":56E2E879" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 309.2 MB temporary data Removed.

The system needed a reboot..

==== End of Fixlog 21:20:17 ====

#10 Příspěvek od **vyosek** » 25 čer 2015 07:51

Jak se chova PC?

Coudy · #11 Příspěvek od **Coudy** » 25 čer 2015 20:35

Zdá se že je vše v pořádku. Děkuji

#12 Příspěvek od **vyosek** » 26 čer 2015 07:15

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remove disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

Samovolně vyskakující Chrome

Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

frst

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome

Re: Samovolně vyskakující Chrome